Download key using web key directory from torproject.org instead of keyservers

This commit is contained in:
Micah Lee 2020-10-06 15:58:22 -07:00
parent d6343012b4
commit 12ac68ecd8
No known key found for this signature in database
GPG Key ID: 403C2657CD994F73

View File

@ -193,10 +193,11 @@ class Common(object):
else: else:
print('Refreshing local keyring...') print('Refreshing local keyring...')
# Fetch key from wkd, as per https://support.torproject.org/tbb/how-to-verify-signature/
p = subprocess.Popen(['/usr/bin/gpg2', '--status-fd', '2', p = subprocess.Popen(['/usr/bin/gpg2', '--status-fd', '2',
'--homedir', self.paths['gnupg_homedir'], '--homedir', self.paths['gnupg_homedir'],
'--keyserver', 'hkps://keys.openpgp.org', '--auto-key-locate', 'nodefault,wkd',
'--refresh-keys'], stderr=subprocess.PIPE) '--locate-keys', 'torbrowser@torproject.org'], stderr=subprocess.PIPE)
p.wait() p.wait()
for output in p.stderr.readlines(): for output in p.stderr.readlines():