| Git Clone URL: | https://aur.archlinux.org/tor-browser-bin.git (read-only, click to copy) |
|---|---|
| Package Base: | tor-browser-bin |
| Description: | Tor Browser Bundle: anonymous browsing using Firefox and Tor |
| Upstream URL: | https://www.torproject.org/projects/torbrowser.html |
| Licenses: | MPL-2.0 |
| Conflicts: | tor-browser |
| Provides: | tor-browser |
| Submitter: | FabioLolix |
| Maintainer: | grufo (jugs) |
| Last Packager: | jugs |
| Votes: | 1280 |
| Popularity: | 1.03 |
| First Submitted: | 2023-09-24 17:45 (UTC) |
| Last Updated: | 2024-12-06 14:48 (UTC) |
How do I verify PGP signatures for this package?
When running makepkg -si:
==> Verifying source file signatures with gpg... tor-browser-linux64-8.0.8_en-US.tar.xz ... FAILED (unknown public key EB774491D9FF06E2) ==> ERROR: One or more PGP signatures could not be verified!
I aggree @ahmed_master23
We can't get file from dist.torproject.org at tor blocked countries. Can you add alternative URL like GitHub?
Firedox is also a dependency. Or maybe just some of its dependencies.
@rodneyck I'm not able to reproduce this error. Please try in a chroot.
Getting validation errors on the latest update...
==> Validating source files with md5sums... tor-browser-linux64-8.0.7_en-US.tar.xz ... FAILED tor-browser-linux64-8.0.7_en-US.tar.xz.asc ... Skipped tor-browser-en.desktop ... Passed tor-browser-en.png ... Passed tor-browser-en.sh ... Passed ==> ERROR: One or more files did not pass the validity check!
could you add other sources like github for people that have tor blocked and another one for people that have github blocked if there was a timeout error like https://github.com/TheTorProject/gettorbrowser/releases/download/v8.0.2/tor-browser-linux64-8.0.2_en-US.tar.xz
gpg --keyserver keys.mozilla.org --recv-keys 0x4E2C6E8793298290 gpg --recv-keys 2E1AC68ED40814E0 gpg --recv-keys D1483FA6C3C07136 && yaourt -S tor-browser-es gpg --keyserver hkp://pgp.mit.edu:11371 --recv-keys 0x4E2C6E8793298290 gpg: recepción del servidor de claves fallida: No hay ningún servidor de claves disponible
==> Verificando las firmas de las fuentes con gpg... tor-browser-linux64-8.0.6_es-ES.tar.xz ... HA FALLADO (Firma viciada en relación con la clave pública EB774491D9FF06E2) ==> ERROR: ¡No se ha podido verificar alguna de las firmas PGP!
@yar @jugs: It would be nice if you could answer to @caleb and @nTia89 questions. I also don't understand the reason to use three different hashes so iff there is one, I'd love to know it. Otherwise, just delete the extra hashes.
Pinned Comments
grufo commented on 2019-08-15 02:22 (UTC)
Before running
makepkg, you must do this (as normal user):$ gpg --auto-key-locate nodefault,wkd --locate-keys torbrowser@torproject.orgIf you want to update tor-browser from AUR without AUR helpers you can run in a terminal:
$ tor-browser -u