[tor-bugs] #17897 [Tor Browser]: Torbrowser Installer Hashes Fail to Compare.

[Tor Bug Tracker & Wiki]

#17897: Torbrowser Installer Hashes Fail to Compare.
---------------------------+---------------------------
 Reporter:  onePW          |          Owner:  erinn
     Type:  defect         |         Status:  closed
 Priority:  Medium         |      Milestone:
Component:  Tor Browser    |        Version:
 Severity:  Normal         |     Resolution:  not a bug
 Keywords:  Hash Compares  |  Actual Points:
Parent ID:                 |         Points:
  Sponsor:                 |
---------------------------+---------------------------
Changes (by dcf):

 * status:  new => closed
 * component:  Tor bundles/installation => Tor Browser
 * version:  Tor: unspecified =>
 * resolution:   => not a bug
 * milestone:  Tor: unspecified =>


Comment:

 You have to strip to authenticode signature off the Windows executable
 before you can verify it via sha256sums.

 https://www.torproject.org/docs/verifying-signatures.html.en
   If you want to verify a Windows Tor Browser package you need to first
 strip off the authenticode signature of it. Tools that can be used for
 this purpose are [http://osslsigncode.sourceforge.net/ osslsigncode] and
 [http://forum.xda-developers.com/showthread.php?t=416175 delcert.exe].
 Assuming you have built e.g. osslsigncode on a Linux computer you can
 enter
   `/path/to/your/osslsigncode remove-signature /path/to/your/<TOR BROWSER
 FILE NAME>.exe <TOR BROWSER FILE NAME>.exe`

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17897#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online