[tor-bugs] #15539 [Tor bundles/installation]: Removing signature on Tor Browser .exe should result in SHA256 value listed in sha256sums.txt

[Tor Bug Tracker & Wiki]

#15539: Removing signature on Tor Browser .exe should result in SHA256 value listed
in sha256sums.txt
------------------------------------------+---------------------------
     Reporter:  gk                        |      Owner:  gk
         Type:  defect                    |     Status:  needs_review
     Priority:  normal                    |  Milestone:
    Component:  Tor bundles/installation  |    Version:
   Resolution:                            |   Keywords:  tbb-4.5-alpha
Actual Points:                            |  Parent ID:
       Points:                            |
------------------------------------------+---------------------------
Changes (by gk):

 * status:  assigned => needs_review


Comment:

 bug_15539_v4 (https://gitweb.torproject.org/user/gk/tor-browser-
 bundle.git/commit/?h=bug_15539_v4&id=e487b6ffca7b023442fd8820eed8345a20310fde)
 is up for review. It still gives the old .exe back after stripping off the
 signature with `osslsigncode`. For testing purposes I made a bunch of
 nightly builds and I got always the same SHA256 sum. Thus, `pefile` does
 not seem to introduce new reproducibility issues either.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15539#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online