[tor-bugs] #18371 [Tor Browser]: TorBrowser.app.meek-http-helper symlinks incompatible with Gatekeeper signing

[Tor Bug Tracker & Wiki]

#18371: TorBrowser.app.meek-http-helper symlinks incompatible with Gatekeeper
signing
-----------------------------------+------------------------------
 Reporter:  mcs                    |          Owner:  mcs
     Type:  defect                 |         Status:  needs_review
 Priority:  Medium                 |      Milestone:
Component:  Tor Browser            |        Version:
 Severity:  Normal                 |     Resolution:
 Keywords:  TorBrowserTeam201603R  |  Actual Points:
Parent ID:  #13252                 |         Points:
 Reviewer:                         |        Sponsor:
-----------------------------------+------------------------------

Comment (by mcs):

 Replying to [comment:16 dcf]:
 > [snip]
 > Yes, you will need `GOPTLIB_TAG=0.5` (the most recent tag) for the
 `ProxyURL` stuff.
 >
 > Alternatively, I could make you a branch off of 0.20, the current
 `MEEK_TAG` and the most recent one that doesn't depend on `ProxyURL` in
 goptlib.
 >
 > But the diffs are pretty minor:
 >   https://gitweb.torproject.org/pluggable-
 transports/goptlib.git/diff/?id=0.5&id2=0.2
 >   https://gitweb.torproject.org/pluggable-
 transports/meek.git/diff/?id=0.22&id2=0.20

 I assume your recommendation is to use the latest meek code? I quickly
 looked over the diffs and did not see anything that alarmed me, so maybe
 we should look at this as an opportunity to move Tor Browser to the latest
 meek code. gk, what do you think?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18371#comment:17>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online