torbrowser-launcher is downloading Tor Browser

Project:Trisquel
Version:8.0
Component:License problems
Category:bug report
Priority:critical
Assigned:Unassigned
Status:active
Description

torbrowser-launcher is a package in Trisquel 8.0. It is downloading Tor Browser and launching it (I think). Tor Browser is a Firefox fork (DRM is disabled, but I don't know is it removed). Also, signature is broken (always invalid). It is better to remove this package.

Tue, 05/22/2018 - 06:11

I asked about the DRM status in https://trac.torproject.org/projects/tor/ticket/26144

If there are no DRM then I'll suggest that we change the topic to: torbrowser-launcher is not downloading Tor Browser

> torbrowser-launcher is a package in Trisquel 8.0. It is downloading Tor Browser and launching it (I think). Tor Browser is a Firefox fork (DRM is disabled, but I don't know is it removed).

Tor Browser is approved in https://directory.fsf.org/wiki/Tor_Browser and marked as a high priority project.

> Also, signature is broken (always invalid).

This is not a valid argument to remove the package. It's a bug, here's to circumvent it:

$ sudo apt install torbrowser-launcher
$ torbrowser-launcher
Tor Browser Launcher
By Micah Lee, licensed under MIT
version 0.2.4
https://github.com/micahflee/torbrowser-launcher
Creating GnuPG homedir /home/foo/.local/share/torbrowser/gnupg_homedir
Downloading and installing Tor Browser for the first time.
Downloading https://dist.torproject.org/torbrowser/update_2/release/Linux_x86_64-gcc3/x/en-US
Latest version: 7.5.4
Downloading https://dist.torproject.org/torbrowser/7.5.4/tor-browser-linux64-7.5.4_en-US.tar.xz.asc
Downloading https://dist.torproject.org/torbrowser/7.5.4/tor-browser-linux64-7.5.4_en-US.tar.xz
Verifying signature

See screenshot 1

This could be solved with this command (note that you must run torbrowser-launcher to generate ~/.local/share/torbrowser/gnupg_homedir/ first):

$ gpg --homedir "$HOME/.local/share/torbrowser/gnupg_homedir/" --refresh-keys --keyserver pgp.mit.edu
gpg: refreshing 1 key from hkp://pgp.mit.edu
gpg: requesting key 93298290 from hkp server pgp.mit.edu
gpg: key 93298290: "Tor Browser Developers (signing key) <name at domain>" 215 new signatures
gpg: key 93298290: "Tor Browser Developers (signing key) <name at domain>" 1 new subkey
gpg: Total number processed: 1
gpg: new subkeys: 1
gpg: new signatures: 215
gpg: no ultimately trusted keys found

However, I ran into a second issue, torbrowser-launcher failed to install:

$ torbrowser-launcher
Tor Browser Launcher
By Micah Lee, licensed under MIT
version 0.2.4
https://github.com/micahflee/torbrowser-launcher
Downloading and installing Tor Browser for the first time.
Downloading https://dist.torproject.org/torbrowser/update_2/release/Linux_x86_64-gcc3/x/en-US
Latest version: 7.5.4
Downloading https://dist.torproject.org/torbrowser/7.5.4/tor-browser-linux64-7.5.4_en-US.tar.xz.asc
Downloading https://dist.torproject.org/torbrowser/7.5.4/tor-browser-linux64-7.5.4_en-US.tar.xz
Verifying signature
Extracting tor-browser-linux64-7.5.4_en-US.tar.xz
Running /home/foo/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/start-tor-browser.desktop
Unhandled Error
Traceback (most recent call last):
File "/usr/lib/python2.7/dist-packages/twisted/web/_newclient.py", line 916, in dispatcher
return func(*args, **kwargs)
File "/usr/lib/python2.7/dist-packages/twisted/web/_newclient.py", line 1472, in _finishResponse_WAITING
self._giveUp(Failure(reason))
File "/usr/lib/python2.7/dist-packages/twisted/web/_newclient.py", line 1525, in _giveUp
self._disconnectParser(reason)
File "/usr/lib/python2.7/dist-packages/twisted/web/_newclient.py", line 1513, in _disconnectParser
parser.connectionLost(reason)
--- <exception caught here>---
File "/usr/lib/python2.7/dist-packages/twisted/web/_newclient.py", line 537, in connectionLost
self.response._bodyDataFinished()
File "/usr/lib/python2.7/dist-packages/twisted/web/_newclient.py", line 916, in dispatcher
return func(*args, **kwargs)
File "/usr/lib/python2.7/dist-packages/twisted/web/_newclient.py", line 1161, in _bodyDataFinished_CONNECTED
self._bodyProtocol.connectionLost(reason)
File "/usr/lib/python2.7/dist-packages/torbrowser_launcher/launcher.py", line 312, in connectionLost
self.all_done(reason)
File "/usr/lib/python2.7/dist-packages/torbrowser_launcher/launcher.py", line 329, in response_finished
self.run_task()
File "/usr/lib/python2.7/dist-packages/torbrowser_launcher/launcher.py", line 267, in run_task
self.verify()
File "/usr/lib/python2.7/dist-packages/torbrowser_launcher/launcher.py", line 463, in verify
self.run_task()
File "/usr/lib/python2.7/dist-packages/torbrowser_launcher/launcher.py", line 271, in run_task
self.extract()
File "/usr/lib/python2.7/dist-packages/torbrowser_launcher/launcher.py", line 503, in extract
self.run_task()
File "/usr/lib/python2.7/dist-packages/torbrowser_launcher/launcher.py", line 275, in run_task
self.run()
File "/usr/lib/python2.7/dist-packages/torbrowser_launcher/launcher.py", line 519, in run
if not self.check_min_version():
File "/usr/lib/python2.7/dist-packages/torbrowser_launcher/launcher.py", line 507, in check_min_version
for line in open(self.common.paths['tbb']['versions']).readlines():

See screenshot 2

torbrowser-launcher_0.2.4-1_amd64.deb is listed in https://ubuntu.pkgs.org/16.04/ubuntu-universe-i386/torbrowser-launcher_0.2.4-1_i386.deb.html but not in the original web repository for Ubuntu 16.04: https://packages.ubuntu.com/search?keywords=torbrowser-launcher&searchon=names&suite=bionic&section=all

It seems like torbrowser-launcher has been removed from Ubuntu, and that Trisquel 8 still uses it (Trisquel is based on Ubuntu).

AttachmentSize
1.png 14.05 KB
2.png 10.01 KB