[tor-bugs] #21694 [- Select a component]: Tor source tarball signed with sha1

[Tor Bug Tracker & Wiki]

#21694: Tor source tarball signed with sha1
----------------------------------+------------------------------------
 Reporter:  cypherpunks           |          Owner:  (none)
     Type:  defect                |         Status:  closed
 Priority:  Medium                |      Milestone:  Tor: 0.3.1.x-final
Component:  - Select a component  |        Version:  Tor: 0.3.1.7
 Severity:  Normal                |     Resolution:  fixed
 Keywords:                        |  Actual Points:
Parent ID:                        |         Points:
 Reviewer:                        |        Sponsor:
----------------------------------+------------------------------------
Changes (by nickm):

 * status:  reopened => closed
 * resolution:   => fixed


Comment:

 I think I got it right this time
 {{{
 [1134]$ gpg -v tor-0.3.1.8.tar.gz.asc
 gpg: assuming signed data in `tor-0.3.1.8.tar.gz'
 gpg: Signature made Wed 25 Oct 2017 08:24:11 AM EDT
 gpg:                using RSA key 6AFEE6D49E92B601
 gpg: using subkey 6AFEE6D49E92B601 instead of primary key FE43009C4607B1FB
 gpg: using classic trust model
 gpg: Good signature from "Nick Mathewson <nickm at alum.mit.edu>"
 gpg:                 aka "Nick Mathewson <nickm at wangafu.net>"
 gpg:                 aka "Nick Mathewson <nickm at torproject.org>"
 gpg:                 aka "Nick Mathewson <nickm at freehaven.net>"
 gpg: binary signature, digest algorithm SHA512
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21694#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online