Revert "Make get-tor.py download Tor Browser signing key from keys.openpgp.org"

This reverts commit 2c8003841f.
This commit is contained in:
Micah Lee 2023-09-27 18:37:37 -07:00
parent 983ccbd7c1
commit 5057bdac12
3 changed files with 5 additions and 6 deletions

View file

@ -203,9 +203,6 @@ def get_tor_linux64(gpg, torkey, linux64_url, linux64_filename, expected_linux64
# Verify signature
sig_stream = open(tarball_sig_path, "rb")
verified = gpg.verify_file(sig_stream, tarball_path)
print(verified)
print(verified.valid)
print(verified.pubkey_fingerprint)
if not verified.valid or verified.pubkey_fingerprint != tor_dev_fingerprint:
print("ERROR! The tarball verification with the signature failed!")
sys.exit(-1)
@ -325,7 +322,9 @@ def main(platform):
) = get_latest_tor_version_urls(platform)
tmpdir = tempfile.TemporaryDirectory()
gpg = gnupg.GPG(gnupghome=tmpdir.name)
torkey = gpg.recv_keys("keys.openpgp.org", tor_dev_fingerprint)
torkey = gpg.import_keys_file(
os.path.join(root_path, "scripts", "kounek7zrdx745qydx6p59t9mqjpuhdf")
)
print(f"Imported Tor GPG key: {torkey.fingerprints}")
if platform == "win64":

Binary file not shown.