[tbb-bugs] #25543 [Applications/Tor Browser]: Rebase Tor Browser patches for ESR60

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed May 16 13:12:29 UTC 2018


#25543: Rebase Tor Browser patches for ESR60
--------------------------------------------+------------------------------
 Reporter:  gk                              |          Owner:
                                            |  arthuredelstein
     Type:  task                            |         Status:
                                            |  needs_revision
 Priority:  Very High                       |      Milestone:
Component:  Applications/Tor Browser        |        Version:
 Severity:  Normal                          |     Resolution:
 Keywords:  TorBrowserTeam201805, ff60-esr  |  Actual Points:
Parent ID:  #25741                          |         Points:
 Reviewer:                                  |        Sponsor:
--------------------------------------------+------------------------------

Comment (by mcs):

 Replying to [comment:28 gk]:
 > Careful! We need to keep at least one of the MAR signing keys we are
 currently shipping. Otherwise it is a bit hard with updates. :)

 The new updater needs MAR files in the new format, so I don't see why we
 need to keep one of the old signing keys. But it is OK to do so for now.

 > So, if I see this correctly then #20589 added the one we are currently
 using in the alpha for signing and #23916 added the current backup key. I
 estimate we'll have the rebase ready before I'll add a new signing key.
 Thus, I think we could drop #20589 and add an adapted commit for #23916
 that basically creates the status quo. And then we'd replace the current
 backup key with the new one using SHA-384.

 For now, that is what I have done in the local tree that Kathy and I are
 working on; hopefully we will be done soon and make the patches available
 here.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25543#comment:30>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list