Trac issueshttps://gitlab.torproject.org/legacy/trac/-/issues2020-06-13T16:47:04Zhttps://gitlab.torproject.org/legacy/trac/-/issues/9811use sha256 or sha512 instead of sha1 for deb.torproject.org2020-06-13T16:47:04Zproperuse sha256 or sha512 instead of sha1 for deb.torproject.orgFor example http://deb.torproject.org/torproject.org/dists/tor-0.2.4.x-jessie/InRelease currently uses Hash: SHA1. Please use a stronger hash, such as sha256 or sha512.
I believe, if you add
```
personal-digest-preferences SHA512
cert-...For example http://deb.torproject.org/torproject.org/dists/tor-0.2.4.x-jessie/InRelease currently uses Hash: SHA1. Please use a stronger hash, such as sha256 or sha512.
I believe, if you add
```
personal-digest-preferences SHA512
cert-digest-algo SHA512
default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed
```
to ~/.gnupg/gpg.conf that should do the trick.
Otherwise try "gpg --edit-key your@mail", setpref, SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB, save.weasel (Peter Palfrader)weasel (Peter Palfrader)https://gitlab.torproject.org/legacy/trac/-/issues/9810use Valid-Until field to prevent downgrade attacks for deb.torproject.org2020-06-15T23:20:16Zproperuse Valid-Until field to prevent downgrade attacks for deb.torproject.orgTo prevent downgrade and stale mirror attacks against deb.torproject.org, please use the [Valid-Until](http://blog.ganneff.de/blog/2008/09/23/valid-until-field-in-release-f.html) field.
Since you are using reprepro, you can add in your ...To prevent downgrade and stale mirror attacks against deb.torproject.org, please use the [Valid-Until](http://blog.ganneff.de/blog/2008/09/23/valid-until-field-in-release-f.html) field.
Since you are using reprepro, you can add in your conf/distributions file
```
ValidFor: 2w
```
(Or ValidFor: 4w or 1m.) under every instance of "Label:" or so.weasel (Peter Palfrader)weasel (Peter Palfrader)https://gitlab.torproject.org/legacy/trac/-/issues/1875Automate Orbot builds2013-10-16T18:54:20ZErinn ClarkAutomate Orbot buildsOrbot builds are currently done by hand. The process is pretty simple, so it ought to be easy to automate. Nathan might have some ideas of things he wants added to this, so I'm adding him to the cc.Orbot builds are currently done by hand. The process is pretty simple, so it ought to be easy to automate. Nathan might have some ideas of things he wants added to this, so I'm adding him to the cc.Deliverable-Mar2011Nathan FreitasNathan Freitashttps://gitlab.torproject.org/legacy/trac/-/issues/1874Automate Tor Browser Bundle builds2014-07-03T15:43:58ZErinn ClarkAutomate Tor Browser Bundle buildsThis should be pretty simple. TBB Linux and OSX can both be built from beginning to end with one command, so they just need to be properly tied in with Hudson. (Linux is already there.)This should be pretty simple. TBB Linux and OSX can both be built from beginning to end with one command, so they just need to be properly tied in with Hudson. (Linux is already there.)Deliverable-December2010Erinn ClarkErinn Clarkhttps://gitlab.torproject.org/legacy/trac/-/issues/1872Automate Debian package builds2014-07-03T15:43:58ZErinn ClarkAutomate Debian package buildsRight now we are distributing four packages in our own repository (tor, vidalia, polipo, and ttdnsd) with plans to add more. I have some scripts -- not checked in yet, don't kill me -- which are general enough that they can probably be u...Right now we are distributing four packages in our own repository (tor, vidalia, polipo, and ttdnsd) with plans to add more. I have some scripts -- not checked in yet, don't kill me -- which are general enough that they can probably be used for most of these. Peter has his own scripts which he'll eventually tie in to the Hudson infrastructure too, so adding him on cc.Deliverable-December2010Erinn ClarkErinn Clarkhttps://gitlab.torproject.org/legacy/trac/-/issues/1871Automate Windows bundle builds2014-07-03T15:43:58ZErinn ClarkAutomate Windows bundle buildsThis includes the Vidalia bundle and the expert bundle. The next step is for me to set up a Windows build slave for Hudson.This includes the Vidalia bundle and the expert bundle. The next step is for me to set up a Windows build slave for Hudson.Deliverable-December2010Erinn ClarkErinn Clarkhttps://gitlab.torproject.org/legacy/trac/-/issues/1870Automate OSX bundle builds2014-07-03T15:43:58ZErinn ClarkAutomate OSX bundle buildsThere is some logic to build the OSX bundles automatically -- see https://gitweb.torproject.org/erinn/build-scripts.git/tree/HEAD:/osx-bundles. Improve and extend this and tie it into Hudson.There is some logic to build the OSX bundles automatically -- see https://gitweb.torproject.org/erinn/build-scripts.git/tree/HEAD:/osx-bundles. Improve and extend this and tie it into Hudson.Deliverable-December2010Erinn ClarkErinn Clark