[tor-bugs] #21238 [Applications/Tor Messenger]: tor-messenger-linux32-0.3.0b2 BAD signature

[Tor Bug Tracker & Wiki]

#21238: tor-messenger-linux32-0.3.0b2 BAD signature
--------------------------------------------+------------------------------
     Reporter:  BobSmith                    |      Owner:
         Type:  defect                      |     Status:  new
     Priority:  Very High                   |  Milestone:
    Component:  Applications/Tor Messenger  |    Version:  Tor: unspecified
     Severity:  Blocker                     |   Keywords:
Actual Points:                              |  Parent ID:
       Points:                              |   Reviewer:
      Sponsor:                              |
--------------------------------------------+------------------------------
 Hi,

 I was trying to verify signature of Tor Messenger 0.3.0 beta and got BAD
 signature:
 #Import the key
 gpg --keyserver pool.sks-keyservers.net --recv-keys 0xB01C8B006DA77FAA
 Fingerprint OK
 gpg --fingerprint 0xB01C8B006DA77FAA
 pub   4096R/0xB01C8B006DA77FAA 2016-02-25 [expires: 2020-02-24]

   Key fingerprint = E4AC D397 5427 A5BA 8450  A1BE B01C 8B00 6DA7 7FAA

 uid                 [ unknown] Sukhbir Singh <azadi at riseup.net>
 uid                 [ unknown] Sukhbir Singh <sukhbir at torproject.org>
 sub   4096R/0x1AF20C043D9F9289 2016-02-25 [expires: 2020-02-24]

 Verification:

 gpg --verify sha256sums-signed-build.txt.asc tor-messenger-linux32-0.3
 .0b2_en-US.tar.xz
 gpg: Signature made Wed 28 Dec 2016 01:22:29 PM UTC
 gpg:                using RSA key 0xB01C8B006DA77FAA
 gpg: BAD signature from "Sukhbir Singh <azadi at riseup.net>" [unknown]

 Files were downloaded from here:
 https://trac.torproject.org/projects/tor/wiki/doc/TorMessenger#Downloads

 Best,
 BS

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21238>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online