[tor-bugs] #27278 [Webpages/Website]: Bad Instruction Page

[Tor Bug Tracker & Wiki]

#27278: Bad Instruction Page
------------------------------+------------------------
 Reporter:  TormanToo         |          Owner:  (none)
     Type:  defect            |         Status:  new
 Priority:  Very High         |      Milestone:
Component:  Webpages/Website  |        Version:
 Severity:  Normal            |     Resolution:
 Keywords:                    |  Actual Points:
Parent ID:                    |         Points:
 Reviewer:                    |        Sponsor:
------------------------------+------------------------

Comment (by traumschule):

 Hi TormanToo,
 {{{
 gpg --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89
 gpg: no keyserver known (use opton --keyserver)
 gpg: keyserver receive failed: bad URI

 So I tried:
 gpg --recv --keyserver A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89
 I got the prompt back, so I guess something happened.
 }}}
 Try {{{gpg2 --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89}}} or {{{sudo
 gpg --keyserver pool.sks-keyservers.net --recv
 A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89}}} or have a look at
 {{{
 https://tor.stackexchange.com/questions/12916/problem-with-tor-and-gpg-key
 or
 https://superuser.com/questions/715067/tor-dependency-package-error-on-
 debian-wheezy or
 https://ooni.torproject.org/docs/ or
 https://fabianlee.org/2017/09/23/ubuntu-installing-tor-on-
 ubuntu-14-04-and-16-04/if or
 https://medium.com/@jasonrigden/how-to-host-a-site-on-the-dark-web-
 38edf00996bf or
 https://www.linux.com/blog/beginners-guide-tor-ubuntu
 }}}
 if you want.

 It's funny how many useful pages pop up searching for this key id.

 Alternatively one can try to search for a key on a keyserver with a web
 interface and download the key from there (note the 0x before the key id):
 https://pgp.mit.edu/pks/lookup?op=vindex&search=0xA3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89

 - Then you right click the link to the public key (not the summary peach)
 - copy it
 - go to your terminal
 - type 'wget -O - ' and paste the link, then continue typing ' | sudo apt-
 key add -
 - or just download the key with wget and {{{sudo apt-key add FILE}}}
 (replace FILE with the file name reported by wget)
 - if that gives OK, proceed with the rest of the guide
 (got the inspiration from https://bitmask.net/en/install/linux)
 or
 - show the key in the browser
 - press CTRL+a and CTRL+c
 - type into the terminal: gpg --import<enter> CTRL+V and CTRL+D
 or
 - paste the copied key into a FILE and do {{{gpg --import FILE}}}
 or
 - choose save as in the browser (i guess you get the idea)

 {{{
 Next I tried:
 gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -
 gpg: can't open '/home/me/.gnupg/pubring.gpg'
 gpg: WARNING: nothing exported
 gpg: key export failted: file open error
 gpg:no valid OpenPGP data found.

 So then I tried:
 sudo gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key
 add -
 gpg: WARNING: nothing exported
 gpg: no valid OpenPGP data found.
 }}}
 The second step only works of the first succeeded.

 If that worked for you, i'm interested what you think of this page:
 https://www.torproject.org/docs/verifying-signatures.html.en

 Other good reads:
 - riseup.net/en/security/message-security/openpgp/gpg-best-practices
 - riseup.net/en/security/network-security/riseup-ca#import-riseups-public-
 pgp-key

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27278#comment:19>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online