[tor-bugs] #18405 [Tor Browser]: Check that MAR signing is done properly

[Tor Bug Tracker & Wiki]

#18405: Check that MAR signing is done properly
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  gk
     Type:  enhancement                          |         Status:
 Priority:  Medium                               |  needs_review
Component:  Tor Browser                          |      Milestone:
 Severity:  Normal                               |        Version:
 Keywords:  tbb-security TorBrowserTeam201603R   |     Resolution:
  GeorgKoppen201603                              |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
                                                 |  SponsorU
-------------------------------------------------+-------------------------

Comment (by boklm):

 The script looks good. I used it to check the mar files of 5.5.3, 6.0a3
 and 6.0a3-hardened.

 Minor thing: maybe we could add the mar-tools directory to the PATH and
 use signmar from the PATH instead of using the SIGNMAR environment
 variable, but it doesn't make a big difference.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18405#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online