[tor-bugs] #15539 [Tor bundles/installation]: Removing signature on Tor Browser .exe should result in SHA256 value listed in sha256sums.txt

[Tor Bug Tracker & Wiki]

#15539: Removing signature on Tor Browser .exe should result in SHA256 value listed
in sha256sums.txt
------------------------------------------+-----------------
     Reporter:  gk                        |      Owner:  gk
         Type:  defect                    |     Status:  new
     Priority:  normal                    |  Milestone:
    Component:  Tor bundles/installation  |    Version:
   Resolution:                            |   Keywords:
Actual Points:                            |  Parent ID:
       Points:                            |
------------------------------------------+-----------------

Comment (by cypherpunks):

 > I think in order to solve this bug we should indeed patch NSIS as the
 other tools are behaving properly it seems.

 We could to fix it by kludges too, it's faster at least, like this:
 {{{
   cp torbrowser-install.exe moditexe
   dd if=/dev/zero bs=1 count=$((8-$(stat -c%s moditexe)%8)) >> moditexe
   echo "import pefile; pef = pefile.PE('moditexe', fast_load=True); " >
 chksumfix.py
   echo "pef.OPTIONAL_HEADER.CheckSum = pef.generate_checksum(); " >>
 chksumfix.py
   echo "pef.write(filename='moditexe2')" >> chksumfix.py
   python ./chksumfix.py
   rm torbrowser-install.exe
   rm moditexe
   mv moditexe2 torbrowser-install.exe
 }}}
 (req python-pefile pkg)
 But test shows it spends too many seconds while trying to calculate and to
 write so many bytes, probably local problems, however.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15539#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online