[tor-bugs] #30779 [Applications/Tor Browser]: OpenSSL 1.1.1c is not built reproducibly

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Jun 5 21:31:15 UTC 2019


#30779: OpenSSL 1.1.1c is not built reproducibly
-------------------------------------------+--------------------------
 Reporter:  gk                             |          Owner:  tbb-team
     Type:  defect                         |         Status:  new
 Priority:  Immediate                      |      Milestone:
Component:  Applications/Tor Browser       |        Version:
 Severity:  Normal                         |     Resolution:
 Keywords:  TorBrowserTeam201906, tbb-rbm  |  Actual Points:
Parent ID:                                 |         Points:
 Reviewer:                                 |        Sponsor:
-------------------------------------------+--------------------------

Comment (by gk):

 In 1.0.2* we had
 {{{
 #ifdef DATE
 # ifdef OPENSSL_USE_BUILD_DATE
         return (DATE);
 # else
         return ("built on: reproducible build, date unspecified");
 # endif
 }}}
 with
 {{{
 #define DATE "built on: $date"
 }}}
 and
 {{{
 $date = localtime();
 }}}
 but `OPENSSL_USE_BUILD_DATE` was undefined. It seems they changed the mode
 to opt into reproducible builds now while it was previously opt-out.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30779#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list