diff options
Diffstat (limited to 'docs/tor.md')
| -rw-r--r-- | docs/tor.md | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/docs/tor.md b/docs/tor.md index 1c0f589..a408704 100644 --- a/docs/tor.md +++ b/docs/tor.md | |||
| @@ -53,6 +53,25 @@ Without a value, Bitflash looks for Tor in this order: | |||
| 53 | 2. `tor.exe` or `tor` beside the Bitflash binary; | 53 | 2. `tor.exe` or `tor` beside the Bitflash binary; |
| 54 | 3. `tor.exe` or `tor` on `PATH`. | 54 | 3. `tor.exe` or `tor` on `PATH`. |
| 55 | 55 | ||
| 56 | Windows releases can also be built as `Bitflash-*-windows-with-tor.zip`. That | ||
| 57 | package includes the official Tor Expert Bundle under `tor/`, so the first path | ||
| 58 | above exists immediately after extraction and `bitflash -managedtor` needs no | ||
| 59 | separate Tor install. | ||
| 60 | |||
| 61 | The bundled-Tor package is created by: | ||
| 62 | |||
| 63 | ```bash | ||
| 64 | make windows-tor | ||
| 65 | ``` | ||
| 66 | |||
| 67 | The packaging script verifies a pinned SHA256 for the downloaded Tor Expert | ||
| 68 | Bundle before copying it into the release directory. When `gpg` is available it | ||
| 69 | also verifies the matching `.asc` signature against the pinned Tor Browser | ||
| 70 | Developers signing-key fingerprint. Release builds should use | ||
| 71 | `TOR_VERIFY_GPG=required make windows-tor` to make that second check mandatory. | ||
| 72 | The Tor binary is bundled; the runtime data directory, hidden-service key, and | ||
| 73 | control cookie are still created under the user's Bitflash data directory. | ||
| 74 | |||
| 56 | To point at a specific Tor executable: | 75 | To point at a specific Tor executable: |
| 57 | 76 | ||
| 58 | ```bash | 77 | ```bash |