This bug has been fixed upstream in the torbrowser-launcher 0.2.9 release:
https://github.com/micahflee/torbrowser-launcher/releases/tag/v0.2.9
have to be self-signed so users would have to
click through the error. And the encryption would be redundant (though
not necessarily a bad idea -- defense in depth, in case Tor gets badly
broken in ways we can't foresee or something).
--
Micah Lee
--
To UNSUBSCRIBE, email to debian-bu
ct.org/RecommendedTBBVersions
[3] https://github.com/micahflee/torbrowser-launcher/issues/63
[4] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=756194
[5] https://github.com/micahflee/torbrowser-launcher/issues/113
--
Micah Lee
signature.asc
Description: OpenPGP digital signature
On 07/31/2014 11:37 AM, Holger Levsen wrote:
> that bug is not yet fixed in jessie yet, the fixed package will migrate
> tomorrow. or did you use the package from sid on jessie?
Oh alright, good to hear. I used the package from jessie, not sid. I'll
try again tomorrow.
--
ity>.
Without the service_identity module and a recent enough pyOpenSSL
tosupport it, Twisted can perform only rudimentary TLS client
hostnameverification. Many valid certificate/hostname mappings may be
rejected.
verifyHostname, VerificationError = _selectVerifyImplementation()
Tor Browser Launcher
By Micah
rtain packages
make their way from sid into jessie, right?
Is there anything I can do to help fix it on my end?
--
Micah Lee
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
to download and
install it again without verifying the signature or pinning the
torproject.org cert.
Of course, it's possible for Debian users to manually do all of the
things that torbrowser-launcher automatically does, assuming they
already know exactly which cert torproject.org uses, and assuming they
have the correct TBB signing key (both things that are difficult to get
right if you're under an active CA attack, and aren't connected to the
Tor dev's keys in the web of trust, or don't know what the web of trust is).
--
Micah Lee
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
7 matches
Mail list logo
