diff options
| author | Nsable-sh <nsable-sh@noreply.git.bitflash.network> | 2026-08-13 14:35:49 -0300 |
|---|---|---|
| committer | Nsable-sh <nsable-sh@noreply.git.bitflash.network> | 2026-08-13 14:35:49 -0300 |
| commit | 03e583395c42124521d09287bef29bf1d1bbe59b (patch) | |
| tree | 4590b138ec6fb4848004ffa224273b7b6bb45e38 /docs/tor.md | |
| parent | 44fbf6895bd3acd11f552514e746a2e3876cad2d (diff) | |
release: verify bundled Tor signatures
Diffstat (limited to 'docs/tor.md')
| -rw-r--r-- | docs/tor.md | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/docs/tor.md b/docs/tor.md index be6a145..a408704 100644 --- a/docs/tor.md +++ b/docs/tor.md | |||
| @@ -65,9 +65,12 @@ make windows-tor | |||
| 65 | ``` | 65 | ``` |
| 66 | 66 | ||
| 67 | The packaging script verifies a pinned SHA256 for the downloaded Tor Expert | 67 | The packaging script verifies a pinned SHA256 for the downloaded Tor Expert |
| 68 | Bundle before copying it into the release directory. The Tor binary is bundled; | 68 | Bundle before copying it into the release directory. When `gpg` is available it |
| 69 | the runtime data directory, hidden-service key, and control cookie are still | 69 | also verifies the matching `.asc` signature against the pinned Tor Browser |
| 70 | created under the user's Bitflash data directory. | 70 | Developers signing-key fingerprint. Release builds should use |
| 71 | `TOR_VERIFY_GPG=required make windows-tor` to make that second check mandatory. | ||
| 72 | The Tor binary is bundled; the runtime data directory, hidden-service key, and | ||
| 73 | control cookie are still created under the user's Bitflash data directory. | ||
| 71 | 74 | ||
| 72 | To point at a specific Tor executable: | 75 | To point at a specific Tor executable: |
| 73 | 76 | ||