docs/verifying-signatures: update TBB verification output
traumschule

traumschule commited on 2018-08-22 09:04:34
Zeige 1 geänderte Dateien mit 16 Einfügungen und 10 Löschungen.


Note: This updates the output of gpg --verify once to reflect
latest changes gpg. However we need an automated solution in
the future to not confuse users with outdated timestamps.
... ...
@@ -122,16 +122,18 @@ sub   rsa4096/0xEB774491D9FF06E2 2018-05-26 [S] [expires: 2020-09-12]
122 122
     to download the ".asc" file as well. Assuming you downloaded the
123 123
     package and its signature to your Desktop, run:</p>
124 124
     <pre>"C:\Program Files\Gnu\GnuPg\gpg.exe" --verify \
125
-    C:\Users\Alice\Desktop\torbrowser-install-<version-torbrowserbundle>_en-US.exe.asc \
126
-    C:\Users\Alice\Desktop\torbrowser-install-<version-torbrowserbundle>_en-US.exe</pre>
125
+    C:\Users\Alice\Desktop\torbrowser-install-<version-torbrowserbundle>_en-US.exe.asc</pre>
127 126
     <p>Please substitute "Alice" with your own username.</p>
128 127
     <p>The output should say "Good signature": </p>
129 128
     <pre>
130
-    gpg: Signature made Tue 24 Jan 2015 09:29:09 AM CET using RSA key ID D40814E0
131
-    gpg: Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>"
129
+gpg: assuming signed data in 'torbrowser-install-<version-torbrowserbundle>_en-US.exe'
130
+gpg: Signature made Wed 15 Nov 2017 05:52:38 PM CET
131
+gpg:                using RSA key 0xD1483FA6C3C07136
132
+gpg: Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>" [unknown]
132 133
 gpg: WARNING: This key is not certified with a trusted signature!
133 134
 gpg:          There is no indication that the signature belongs to the owner.
134
-    Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290</pre>
135
+Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290
136
+     Subkey fingerprint: A430 0A6B C93C 0877 A445  1486 D148 3FA6 C3C0 7136
135 137
     <p>Currently valid subkey fingerprints are:
136 138
     <pre>
137 139
     5242 013F 02AF C851 B1C7  36B8 7017 ADCE F65C 2036
... ...
@@ -185,17 +187,21 @@ sub   rsa4096/0xEB774491D9FF06E2 2018-05-26 [S] [expires: 2020-09-12]
185 187
     <pre>gpg --verify ~/Downloads/TorBrowser-<version-torbrowserbundleosx64>-osx64_en-US.dmg{.asc*,}</pre>
186 188
 
187 189
     <strong>For Linux users</strong> (change 64 to 32 if you have the 32-bit package):<br />
188
-    <pre>gpg --verify tor-browser-linux64-<version-torbrowserbundlelinux64>_en-US.tar.xz.asc \
189
-    tor-browser-linux64-<version-torbrowserbundlelinux64>_en-US.tar.xz</pre>
190
+    <pre>gpg --verify tor-browser-linux64-<version-torbrowserbundlelinux64>_en-US.tar.xz.asc</pre>
190 191
 
191 192
     <p>The output should say "Good signature":</p>
192 193
 
193 194
     <pre>
194
-    gpg: Signature made Tue 24 Jan 2015 09:29:09 AM CET using RSA key ID D40814E0
195
-    gpg: Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>"
195
+gpg: assuming signed data in 'tor-browser-linux64-<version-torbrowserbundlelinux64>_en-US.tar.xz'
196
+gpg: Signature made Wed 15 Nov 2017 05:52:38 PM CET
197
+gpg:                using RSA key 0xD1483FA6C3C07136
198
+gpg: Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>" [unknown]
196 199
 gpg: WARNING: This key is not certified with a trusted signature!
197 200
 gpg:          There is no indication that the signature belongs to the owner.
198
-    Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290</pre> <p> Currently valid subkey fingerprints are:
201
+Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290
202
+     Subkey fingerprint: A430 0A6B C93C 0877 A445  1486 D148 3FA6 C3C0 7136
203
+    </pre>
204
+    <p> Currently valid subkey fingerprints are:
199 205
     <pre>
200 206
     5242 013F 02AF C851 B1C7  36B8 7017 ADCE F65C 2036
201 207
     BA1E E421 BBB4 5263 180E  1FC7 2E1A C68E D408 14E0
202 208