[tor-bugs] #12382 [Tor bundles/installation]: Changed upstream langpack xpis prevent reproducibility of 3.6.2

[Tor Bug Tracker & Wiki]

#12382: Changed upstream langpack xpis prevent reproducibility of 3.6.2
------------------------------------------+---------------------
     Reporter:  dcf                       |      Owner:  erinn
         Type:  defect                    |     Status:  new
     Priority:  normal                    |  Milestone:
    Component:  Tor bundles/installation  |    Version:
   Resolution:                            |   Keywords:  tbb-3.6
Actual Points:                            |  Parent ID:
       Points:                            |
------------------------------------------+---------------------

Comment (by mcs):

 As I mentioned during the TBB dev meeting, brade and I encountered this
 same problem.  We could re-dzip each langpack XPI after we fetch it, but
 it is still possible that Mozilla will change something if they make a
 habit of re-pushing releases.  I would not expect them to do so very often
 though.

 Actually, it surprises me that we can reliably fetch the langpacks the way
 we do; what if we release before Mozilla does?  Will the langpacks be
 available under
 https://ftp.mozilla.org/pub/mozilla.org/firefox/releases/VERSION ?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12382#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online