[tor-bugs] #5913 [Tor bundles/installation]: Check hashes for the packages downloaded during TBB build

[Tor Bug Tracker & Wiki]

#5913: Check hashes for the packages downloaded during TBB build
--------------------------------------+-------------------------------------
 Reporter:  amieiro                   |          Owner:  erinn       
     Type:  enhancement               |         Status:  needs_review
 Priority:  normal                    |      Milestone:              
Component:  Tor bundles/installation  |        Version:              
 Keywords:                            |         Parent:              
   Points:                            |   Actualpoints:              
--------------------------------------+-------------------------------------
Changes (by amieiro):

  * status:  new => needs_review


Comment:

 It turns out there was a difference in how shasum worked in my
 environment, so the previous patch didn't work.

 Following Sebastian's suggestion, I've pushed a commit to that branch that
 uses `test` to compare the expected hash and the output of shasum. The new
 commit is 9386292a29f
 (https://github.com/flavioamieiro/torbrowser/commit/9386292a29f)

 I've tested this on an Archlinux machine and a debian (squeeze) one.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5913#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online