boklm authored Aug 05, 2019 and Georg Koppen committed Aug 07, 2019

With https://bugzilla.mozilla.org/show_bug.cgi?id=1437942 search engines
are removed from language packs.

Use 1.34 for tor Rust support on nightly builds as well.

We want to better test aarch64 support on Google Play before the 64bit
requirement on Aug 1 is getting enforced.

Georg Koppen authored May 23, 2019 and boklm committed Jul 30, 2019

Adding a clang project is mainly motivated by getting our
mingw-w64/clang toolchain for Windows set up (#28716). Clang is a
separate project and will replace the llvm one (which we use in parallel
for now) as we don't want to build the clang part every time, say, the
ming-w64 commit gets updated. Moreover, we need a recent enough clang on
the host system for building at least the Stylo part in Firefox anyway.

The patches for Windows and general set up is more or less following
build/build-clang/clang-8-mingw.json on the mozilla-esr68 branch.

It seems #30573 did not get solved in that alpha. Remove the entry.

Update the tor-browser-bundle-testsuite.git commit, to add
android-aarch64 nightly builds.

At the same time, we update the tor-browser-bundle-testsuite.git URL to
use the repository that created with #30516.

When creating a new keyring with gpg >= 2.1, it will be created in the
keybox format, which is only compatible with gpg >= 2.1. This means that
the drop-expired-sub-keys script will create keyring files which are not
compatible with older versions of gpg.

To avoid this, we use the output of gpg --export as the keyring file,
which is in the old format.

Versions bump and Changelog update

The previous commit updating keyring/firefox.gpg converted it to the
keybox format, which is only supported by gnupg >= 2.1. This commit
changes it back to the previous format, supported by older versions of
gnupg.

Add the new subkey F1A6668FBB7D572E, and remove expired subkeys.

The operator wants to reduce the maintenance burden and eliminate the
risk of seeing both entry and exit traffic.

This fixes <https://bugs.torproject.org/31055>.

The tools/keyring/drop-expired-sub-keys script can be used to drop all
expired and revoked sub-keys from a keyring.

We also add the script tools/keyring/list-all-keyrings which can be used
to list all the keys included in all the keyring files, to make it
easier to review if any key needs to be removed.

Thanks to boklm for help with this patch.