After imported whonix workstation, I received the following messages when trying to install tor browser for the first time.
====================================
Currently installed version:
None installed. (/home/user/tor-browser_en-US does not exist.)
Downloaded version :
5.0.3
We have not previously accepted a signature yet. Therefore assisted check for downgrade or indefinite freeze attacks skipped. Please check the Current Signature Creation Date looks sane.
Previous Signature Creation Date:
Unknown. Probably never downloaded a signature before.
Last Signature Creation Date :
September 21 12:11:41 UTC 2015
The signature looks quite old already.
Either,
- your clock might be fast (at least 12 days 12 hours 41 minutes 42 seconds fast). In that case, please run Timesync: Start menu -> Applications -> System -> Timesync. Or in Terminal: timesync.
- there is really no newer signature yet. The signature is really older than 30 days already. (Older than 12 days 12 hours 41 minutes 42 seconds already.)
- this is a update-torbrowser bug
- this is an attack
gpg reports:
gpg: Signature made Mon 21 Sep 2015 12:11:41 PM UTC using RSA key ID D40814E0
gpg: Good signature from "Tor Browser Developers (signing key) "
Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7 DE68 4E2C 6E87 9329 8290
Subkey fingerprint: BA1E E421 BBB4 5263 180E 1FC7 2E1A C68E D408 14E0
====================================
What should I do next? thx for reading.