Tor Browser Downloader Error: Expired Signing Key

hopof · August 6, 2021, 9:11pm

Starting from a brand new Qubes 4.0.4 install, the pre-installed anon-whonix Tor Browser version is 10.0.7. When attempting to update to 10.5.2 using Tor Browser Downloader it gives me this error:

ERROR: GPG download signature could NOT be verified. 
Tor Browser update failed! Try again later. 
gpg_bash_lib_output_alright_status: false 
gpg_bash_lib_output_failure: 
gpg_bash_lib_output_diagnostic_message: 
gpg_bash_lib_internal_gpg_verify_status_fd_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file
gpg_bash_lib_internal_gpg_verify_output_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_output_file
gpg_bash_lib_output_gpg_import_output:
gpg: keybox '/home/user/.cache/tb/gpgtmpdir/pubring.kbx' created
gpg: /home/user/.cache/tb/gpgtmpdir/trustdb.gpg: trustdb created
gpg: key 4E2C6E8793298290: public key "Tor Browser Developers (signing key) " imported
gpg: Total number processed: 1
gpg: imported: 1
gpg_bash_lib_output_gpg_verify_output:
gpg: Signature made Tue 13 Jul 2021 08:00:59 PM UTC
gpg: using RSA key EB774491D9FF06E2
gpg: Good signature from "Tor Browser Developers (signing key) " [ultimate]
gpg: Note: This key has expired!
Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7 DE68 4E2C 6E87 9329 8290
Subkey fingerprint: 1107 75B5 D101 FB36 BC6C 911B EB77 4491 D9FF 06E2
gpg_bash_lib_output_gpg_verify_status_fd_output:
[GNUPG:] NEWSIG
[GNUPG:] KEYEXPIRED 1608346353
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] KEYEXPIRED 1608346353
[GNUPG:] SIG_ID rvMOMib5lxbyxZaElcZp8VAT9so 2021-07-13 1626206459
[GNUPG:] KEYEXPIRED 1608346353
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] EXPKEYSIG EB774491D9FF06E2 Tor Browser Developers (signing key) 
[GNUPG:] VALIDSIG 110775B5D101FB36BC6C911BEB774491D9FF06E2 2021-07-13 1626206459 0 4 0 1 10 00 EF6E286DDA85EA2A4BA7DE684E2C6E8793298290
[GNUPG:] KEYEXPIRED 1608346353
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] VERIFICATION_COMPLIANCE_MODE 23

More alarmingly the Tor Browser update actually succeeds despite this error.

ak88 · August 7, 2021, 3:27pm

The Tor developers signing key was recently set to expire and was reissued with a new expiration date, good to 2025. Tor Browser Downloader (aka. tb-updater) and Tor Browser’s internal updater each ship with their own copy of the signing key, so there’s no need to worry. See Update Tor Browser Signing Key · Issue #481 · micahflee/torbrowser-launcher · GitHub.

Update the whonix-ws-15 template first and then try Tor Browser Downloader again. There should be an update for tb-updater which includes the new signing key (it does on my machine, anyway).

If that doesn’t work:

In a whonix DispVM, import updated signing key into user keychain, any of the following ways

gpg --auto-key-locate nodefault,wkd --locate-keys torbrowser@torproject.org
curl -L https://github.com/sysrqb/torbrowser-launcher/raw/develop/share/torbrowser-launcher/tor-browser-developers.asc | gpg --import
curl -L https://openpgpkey.torproject.org/.well-known/openpgpkey/torproject.org/hu/kounek7zrdx745qydx6p59t9mqjpuhdf | gpg --import
gpg --keyservers keyserver.ubuntu.com --recv-keys 0xef6e286dda85ea2a4ba7de684e2c6e8793298290 (not recommended)

gpg -a --export EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 > tbb-team.asc
qvm-copy tbb-team.asc to whonix-ws-15.
In whonix-ws-15, cp -b QubesIncoming/*/tbb-team.asc /usr/usr/share/torbrowser-updater-keys.d/tbb-team.asc
Re-run Tor Browser Updater.

When exporting, make sure you specify the full fingerprint to prevent exporting a potentially malicious key.

(These instructions were written off the top of my head without any testing whatsoever. Follow at your own risk.)

Patrick · August 8, 2021, 4:17pm

Possible source of confusion: Tor Browser Downloader by Whonix vs Tor Browser Internal Updater by The Tor Project. Quote: Tor Browser Essentials

Unfortunately, updating Tor Browser is more complex than regular system updates due to technical limitations outside of Whonix ™ control. [88] However, the following instructions will keep Tor Browser up-to-date at all times.

There are three options for updating Tor Browser in Whonix ™:

The Whonix ™ Tor Browser Downloader. [89]

The Tor Project’s Tor Browser Internal Updater. [90]

Tor Browser manual updates.

Documentation enhanced just now:
Tor Browser: Difference between revisions - Whonix

1. Perform standard (“everyday”) upgrades. [94]

I cannot reproduce this with Tor Browser Downloader by Whonix. To test:

Edit /usr/bin/update-torbrowser

tb_hash_verify() {
   echo "INFO: Checking hash... This will take a moment..."

Change to

tb_hash_verify() {
   echo "INFO: Checking hash... This will take a moment..."
   sudo date --set "Sun 08 Dec 2022 02:51:37 PM UTC"

+ tb_run_function tb_gpg_verify
+ case $tb_skip_functions in
+ true 'INFO: Running '\''tb_gpg_verify'\'', because tb_skip_functions does not include it.'
+ tb_gpg_verify
+ echo 'INFO: Digital signature (GPG) verification... This will take a moment... XXXXXXXXXXXXXXXXX'
INFO: Digital signature (GPG) verification... This will take a moment... XXXXXXXXXXXXXXXXX
+ sudo date --set 'Sun 08 Dec 2022 02:51:37 PM UTC'
Thu 08 Dec 2022 02:51:37 PM UTC
+ date
Thu 08 Dec 2022 02:51:37 PM UTC
+ '[' linux64 = linux-arm64 ']'
+ echo 'INFO: Using digital signature signing key by The Tor Project.'
INFO: Using digital signature signing key by The Tor Project.
+ gpg_bash_lib_input_key_import_dir=/usr/share/torbrowser-updater-keys.d
+ gpg_bash_lib_input_verify_timeout_after=60
+ gpg_bash_lib_input_verify_kill_after=10
+ gpg_bash_lib_input_temp_folder=/home/user/.cache/tb/gpgtmpdir
+ gpg_bash_lib_input_data_file=/home/user/.cache/tb/files/sha256sums-unsigned-build.txt
+ echo 'gpg_bash_lib_input_data_file: /home/user/.cache/tb/files/sha256sums-unsigned-build.txt'
gpg_bash_lib_input_data_file: /home/user/.cache/tb/files/sha256sums-unsigned-build.txt
+ gpg_bash_lib_input_sig_file=/home/user/.cache/tb/files/sha256sums-unsigned-build.txt.asc
+ gpg_bash_lib_input_file_name_enforce=false
+ gpg_bash_lib_input_cleanup=false
+ gpg_bash_lib_input_error_handler_extra='tb_error_handler "$gpg_bash_lib_output_error_handler_message"'
+ '[' -n '' ']'
+ gpg_bash_lib_input_maximum_age_in_seconds=2592000
+ source /usr/lib/gpg-bash-lib/source_all
++ '[' '' = '' ']'
++ '[' -d ./usr/lib/gpg-bash-lib/modules.d ']'
++ '[' -d /usr/lib/gpg-bash-lib/modules.d ']'
++ gpg_bash_lib_input_script_source_dir=/usr/lib/gpg-bash-lib/modules.d
++ for gpg_bash_lib_internal_script_source_file in "$gpg_bash_lib_input_script_source_dir/"*
++ '[' -x /usr/lib/gpg-bash-lib/modules.d/50_common ']'
++ '[' n = '~' ']'
++ grep -q .dpkg-
++ echo /usr/lib/gpg-bash-lib/modules.d/50_common
++ bash -n /usr/lib/gpg-bash-lib/modules.d/50_common
++ source /usr/lib/gpg-bash-lib/modules.d/50_common
++ for gpg_bash_lib_internal_script_source_file in "$gpg_bash_lib_input_script_source_dir/"*
++ '[' -x /usr/lib/gpg-bash-lib/modules.d/50_helper ']'
++ '[' r = '~' ']'
++ grep -q .dpkg-
++ echo /usr/lib/gpg-bash-lib/modules.d/50_helper
++ bash -n /usr/lib/gpg-bash-lib/modules.d/50_helper
++ source /usr/lib/gpg-bash-lib/modules.d/50_helper
+ gpg_bash_lib_function_main_verify
+ gpg_bash_lib_function_init
+++ trap -p ERR
++ eval 'gpg_bash_lib_function_extract_trap_cmd trap -- '\''tb_error_handler'\'' ERR'
+++ gpg_bash_lib_function_extract_trap_cmd trap -- tb_error_handler ERR
+++ printf '%s\n' tb_error_handler
+ gpg_bash_lib_internal_existing_trap=tb_error_handler
+ test -o pipefail
+ true 'gpg_bash_lib_function_init: pipefail is enabled, not enabling it.'
+ gpg_bash_lib_internal_disable_pipefail=false
+ test -o errtrace
+ true 'gpg_bash_lib_function_init: errtrace is enabled, disabling it.'
+ gpg_bash_lib_internal_enable_errtrace=true
+ set +o errtrace
+ gpg_bash_lib_function_sanity_tests
+ trap gpg_bash_lib_function_error_handler ERR
+ command -v date
+ command -v gpg
+ command -v mktemp
+ gpg_bash_lib_function_variables
+ trap gpg_bash_lib_function_error_handler ERR
+ '[' -n /home/user/.cache/tb/gpgtmpdir ']'
+ gpg_bash_lib_output_failure_status=false
+ gpg_bash_lib_output_diagnostic_message=
+ gpg_bash_lib_internal_gpg_verify_status_fd_file=/home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file
+ gpg_bash_lib_internal_gpg_verify_output_file=/home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_output_file
+ gpg_bash_lib_output_gpg_import_output=
+ gpg_bash_lib_output_gpg_verify_exit_code=
+ gpg_bash_lib_output_gpg_verify_output=
+ gpg_bash_lib_output_gpg_verify_status_fd_output=
+ gpg_bash_lib_output_signed_on_unixtime=
+ gpg_bash_lib_output_signed_on_date=
+ gpg_bash_lib_output_file_name_tampering=
+ unset gpg_bash_lib_output_notation
+ declare -A -g gpg_bash_lib_output_notation
+ gpg_bash_lib_output_slow_clock_lenient_up_to_pretty_output=
+ gpg_bash_lib_output_goodsig_status=false
+ gpg_bash_lib_output_validsig_status=false
+ gpg_bash_lib_output_fingerprint_in_hex=
+ gpg_bash_lib_output_current_unixtime=
+ gpg_bash_lib_output_current_time=
+ gpg_bash_lib_output_signed_on_unixtime_minus_current_unixtime=
+ gpg_bash_lib_output_signed_on_unixtime_minus_current_unixtime_pretty=
+ gpg_bash_lib_output_current_unixtime_minus_signed_on_unixtime=
+ gpg_bash_lib_output_current_unixtime_minus_signed_on_unixtime_pretty=
+ gpg_bash_lib_output_in_future_in_seconds=
+ gpg_bash_lib_output_in_future_pretty_output=
+ gpg_bash_lib_output_freshness_status=
+ gpg_bash_lib_output_freshness_detail=
+ gpg_bash_lib_output_freshness_msg=
+ gpg_bash_lib_output_maximum_age_pretty_output=
+ gpg_bash_lib_output_alright_status=
+ '[' -n 60 ']'
+ '[' -n 10 ']'
+ rm --recursive --force /home/user/.cache/tb/gpgtmpdir
+ mkdir --parents /home/user/.cache/tb/gpgtmpdir
+ chmod --recursive 700 /home/user/.cache/tb/gpgtmpdir
+ test -d /home/user/.cache/tb/gpgtmpdir
+ gpg_bash_lib_function_import_keys_to_temp_dir
+ trap gpg_bash_lib_function_error_handler ERR
+ test -d /usr/share/torbrowser-updater-keys.d
+ shopt -q nullglob
+ gpg_bash_lib_internal_disable_nullglob=false
+ shopt -q dotglob
+ gpg_bash_lib_internal_disable_dotglob=true
+ shopt -s dotglob
+ local gpg_bash_lib_internal_key
+ for gpg_bash_lib_internal_key in "$gpg_bash_lib_input_key_import_dir/"*
+ local gpg_bash_lib_internal_key_file_name
++ basename /usr/share/torbrowser-updater-keys.d/placeholder
+ gpg_bash_lib_internal_key_file_name=placeholder
+ '[' placeholder = placeholder ']'
+ continue
+ for gpg_bash_lib_internal_key in "$gpg_bash_lib_input_key_import_dir/"*
+ local gpg_bash_lib_internal_key_file_name
++ basename /usr/share/torbrowser-updater-keys.d/tbb-team.asc
+ gpg_bash_lib_internal_key_file_name=tbb-team.asc
+ '[' tbb-team.asc = placeholder ']'
++ gpg --batch --no-options --ignore-time-conflict --homedir /home/user/.cache/tb/gpgtmpdir --import /usr/share/torbrowser-updater-keys.d/tbb-team.asc
+ gpg_bash_lib_output_gpg_import_output='gpg: keybox '\''/home/user/.cache/tb/gpgtmpdir/pubring.kbx'\'' created
gpg: key 4E2C6E8793298290: 1 duplicate signature removed
gpg: key 4E2C6E8793298290: 236 signatures not checked due to missing keys
gpg: key 4E2C6E8793298290: 1 signature reordered
gpg: /home/user/.cache/tb/gpgtmpdir/trustdb.gpg: trustdb created
gpg: key 4E2C6E8793298290: public key "Tor Browser Developers (signing key) <torbrowser@torproject.org>" imported
gpg: Total number processed: 1
gpg:               imported: 1
gpg: no ultimately trusted keys found'
++ gpg_bash_lib_function_key_file_to_first_primary_fingerprint /usr/share/torbrowser-updater-keys.d/tbb-team.asc
++ trap gpg_bash_lib_function_error_handler ERR
++ local gpg_bash_lib_internal_key_fingerprint_output gpg_bash_lib_internal_first_three
++ local gpg_bash_lib_internal_fingerprint_without_collons gpg_bash_lib_internal_key_file_path
++ local gpg_bash_lib_internal_fingerprint_final
++ gpg_bash_lib_internal_key_file_path=/usr/share/torbrowser-updater-keys.d/tbb-team.asc
+++ timeout --kill-after=10 60 gpg --batch --no-options --homedir /home/user/.cache/tb/gpgtmpdir --with-colons --fixed-list-mode --with-fingerprint --import-options show-only,import-minimal --import /usr/share/torbrowser-updater-keys.d/tbb-team.asc
++ gpg_bash_lib_internal_key_fingerprint_output='pub:-:4096:1:4E2C6E8793298290:1418637242:1753066272::-:::cC::::::23::0:
fpr:::::::::EF6E286DDA85EA2A4BA7DE684E2C6E8793298290:
uid:-::::1595386272::50CE13CA9C3B3D27C0071489BB58D4B898131885::Tor Browser Developers (signing key) <torbrowser@torproject.org>::::::::::0:
sub:e:4096:1:7017ADCEF65C2036:1418637307:1503660203:::::s::::::23:
fpr:::::::::5242013F02AFC851B1C736B87017ADCEF65C2036:
sub:e:4096:1:2E1AC68ED40814E0:1418637398:1503660390:::::s::::::23:
fpr:::::::::BA1EE421BBB45263180E1FC72E1AC68ED40814E0:
sub:r:4096:1:2D000988589839A3:1418637546::::::s::::::23:
fpr:::::::::05FA44253F6C19A8B7F518D42D000988589839A3:
sub:e:4096:1:D1483FA6C3C07136:1472037984:1535109984:::::s::::::23:
fpr:::::::::A4300A6BC93C0877A4451486D1483FA6C3C07136:
sub:e:4096:1:EB774491D9FF06E2:1527369844:1641301932:::::s::::::23:
fpr:::::::::110775B5D101FB36BC6C911BEB774491D9FF06E2:'
++ read -r -d '
' gpg_bash_lib_internal_line
+++ echo 'pub:-:4096:1:4E2C6E8793298290:1418637242:1753066272::-:::cC::::::23::0:
fpr:::::::::EF6E286DDA85EA2A4BA7DE684E2C6E8793298290:
uid:-::::1595386272::50CE13CA9C3B3D27C0071489BB58D4B898131885::Tor Browser Developers (signing key) <torbrowser@torproject.org>::::::::::0:
sub:e:4096:1:7017ADCEF65C2036:1418637307:1503660203:::::s::::::23:
fpr:::::::::5242013F02AFC851B1C736B87017ADCEF65C2036:
sub:e:4096:1:2E1AC68ED40814E0:1418637398:1503660390:::::s::::::23:
fpr:::::::::BA1EE421BBB45263180E1FC72E1AC68ED40814E0:
sub:r:4096:1:2D000988589839A3:1418637546::::::s::::::23:
fpr:::::::::05FA44253F6C19A8B7F518D42D000988589839A3:
sub:e:4096:1:D1483FA6C3C07136:1472037984:1535109984:::::s::::::23:
fpr:::::::::A4300A6BC93C0877A4451486D1483FA6C3C07136:
sub:e:4096:1:EB774491D9FF06E2:1527369844:1641301932:::::s::::::23:
fpr:::::::::110775B5D101FB36BC6C911BEB774491D9FF06E2:'
++ gpg_bash_lib_internal_first_three=pub
++ '[' '!' pub = fpr ']'
++ continue
++ read -r -d '
' gpg_bash_lib_internal_line
++ gpg_bash_lib_internal_first_three=fpr
++ '[' '!' fpr = fpr ']'
++ gpg_bash_lib_internal_fingerprint_without_collons=fprEF6E286DDA85EA2A4BA7DE684E2C6E8793298290
++ gpg_bash_lib_internal_fingerprint_final=EF6E286DDA85EA2A4BA7DE684E2C6E8793298290
++ break
++ echo EF6E286DDA85EA2A4BA7DE684E2C6E8793298290
+ gpg_bash_lib_internal_primary_key_fingerprint=EF6E286DDA85EA2A4BA7DE684E2C6E8793298290
+ echo EF6E286DDA85EA2A4BA7DE684E2C6E8793298290:6:
+ gpg --batch --no-options --ignore-time-conflict --homedir /home/user/.cache/tb/gpgtmpdir --import-ownertrust
+ '[' false = true ']'
+ '[' true = true ']'
+ shopt -u dotglob
+ gpg_bash_lib_function_verify
+ trap gpg_bash_lib_function_error_handler ERR
+ rm --force /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file
+ test -f /home/user/.cache/tb/files/sha256sums-unsigned-build.txt
+ test -f /home/user/.cache/tb/files/sha256sums-unsigned-build.txt.asc
+ '[' -n '' ']'
+ gpg_bash_lib_input_slow_clock_lenient_up_to_seconds=1800
++ gpg_bash_lib_function_displaytime 1800
++ trap gpg_bash_lib_function_error_handler ERR
++ local T D H M S X
++ T=1800
++ D=0
++ H=0
++ M=30
++ S=0
++ X=0
++ [[ 0 -gt 0 ]]
++ true
++ [[ 0 -gt 0 ]]
++ true
++ [[ 30 -gt 0 ]]
+++ gpg_bash_lib_function_displaytime_helper 0
+++ trap gpg_bash_lib_function_error_handler ERR
+++ '[' 0 = 1 ']'
++ printf '%d minutes' 30
++ X=1
++ [[ 0 -gt 0 ]]
++ true
++ true
+ gpg_bash_lib_output_slow_clock_lenient_up_to_pretty_output='30 minutes'
+ gpg_bash_lib_internal_month_has_seconds=2592000
+ '[' -n 2592000 ']'
++ gpg_bash_lib_function_displaytime 2592000
++ trap gpg_bash_lib_function_error_handler ERR
++ local T D H M S X
++ T=2592000
++ D=30
++ H=0
++ M=0
++ S=0
++ X=0
++ [[ 30 -gt 0 ]]
+++ gpg_bash_lib_function_displaytime_helper 0
+++ trap gpg_bash_lib_function_error_handler ERR
+++ '[' 0 = 1 ']'
++ printf '%d days' 30
++ X=1
++ [[ 0 -gt 0 ]]
++ true
++ [[ 0 -gt 0 ]]
++ true
++ [[ 0 -gt 0 ]]
++ true
++ true
+ gpg_bash_lib_output_maximum_age_pretty_output='30 days'
+ local gpg_bash_lib_internal_gpg_fingerprint_pid
+ gpg_bash_lib_internal_gpg_fingerprint_pid=19197
+ wait 19197
+ timeout --kill-after=10 60 gpg --batch --no-options --homedir /home/user/.cache/tb/gpgtmpdir --fingerprint
+ gpg_bash_lib_output_gpg_fingerprint_exit_code=0
+ '[' '!' 0 = 0 ']'
+ local gpg_bash_lib_internal_gpg_verify_pid
+ gpg_bash_lib_internal_gpg_verify_pid=19211
+ wait 19211
+ timeout --kill-after=10 60 gpg --batch --no-options --ignore-time-conflict --with-fingerprint --status-file /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file --homedir /home/user/.cache/tb/gpgtmpdir --verify-options show-notations --verify /home/user/.cache/tb/files/sha256sums-unsigned-build.txt.asc /home/user/.cache/tb/files/sha256sums-unsigned-build.txt
+ gpg_bash_lib_output_gpg_verify_exit_code=0
++ cat /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_output_file
+ gpg_bash_lib_output_gpg_verify_output='gpg: Signature made Tue 13 Jul 2021 08:00:59 PM UTC
gpg:                using RSA key EB774491D9FF06E2
gpg: Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>" [ultimate]
gpg: Note: This key has expired!
Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290
     Subkey fingerprint: 1107 75B5 D101 FB36 BC6C  911B EB77 4491 D9FF 06E2'
+ '[' '!' 0 = 0 ']'
+ gpg_bash_lib_function_parse_status_file
+ trap gpg_bash_lib_function_error_handler ERR
+ test -f /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file
++ cat /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file
+ gpg_bash_lib_output_gpg_verify_status_fd_output='[GNUPG:] NEWSIG
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] SIG_ID rvMOMib5lxbyxZaElcZp8VAT9so 2021-07-13 1626206459
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] EXPKEYSIG EB774491D9FF06E2 Tor Browser Developers (signing key) <torbrowser@torproject.org>
[GNUPG:] VALIDSIG 110775B5D101FB36BC6C911BEB774491D9FF06E2 2021-07-13 1626206459 0 4 0 1 10 00 EF6E286DDA85EA2A4BA7DE684E2C6E8793298290
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] VERIFICATION_COMPLIANCE_MODE 23'
+ grep -i -q 'BADSIG\|EXPSIG\|EXPKEYSIG\|REVKEYSIG\|ERRSIG\|NODATA\|UNEXPECTED\|NO_PUBKEY\|NO_SECKEY\|ERROR' /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file
+ gpg_bash_lib_output_validsig_status=false
+ gpg_bash_lib_output_alright_status=false
+ return 0
+ '[' '!' false = true ']'
+ gpg_bash_lib_function_end
+ gpg_bash_lib_function_diagnostic_message
+ trap gpg_bash_lib_function_error_handler ERR
+ gpg_bash_lib_output_diagnostic_message='gpg_bash_lib_internal_gpg_verify_status_fd_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file
gpg_bash_lib_internal_gpg_verify_output_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_output_file
gpg_bash_lib_output_gpg_import_output:
gpg: keybox '\''/home/user/.cache/tb/gpgtmpdir/pubring.kbx'\'' created
gpg: key 4E2C6E8793298290: 1 duplicate signature removed
gpg: key 4E2C6E8793298290: 236 signatures not checked due to missing keys
gpg: key 4E2C6E8793298290: 1 signature reordered
gpg: /home/user/.cache/tb/gpgtmpdir/trustdb.gpg: trustdb created
gpg: key 4E2C6E8793298290: public key "Tor Browser Developers (signing key) <torbrowser@torproject.org>" imported
gpg: Total number processed: 1
gpg:               imported: 1
gpg: no ultimately trusted keys found
gpg_bash_lib_output_gpg_verify_output:
gpg: Signature made Tue 13 Jul 2021 08:00:59 PM UTC
gpg:                using RSA key EB774491D9FF06E2
gpg: Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>" [ultimate]
gpg: Note: This key has expired!
Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290
     Subkey fingerprint: 1107 75B5 D101 FB36 BC6C  911B EB77 4491 D9FF 06E2
gpg_bash_lib_output_gpg_verify_status_fd_output:
[GNUPG:] NEWSIG
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] SIG_ID rvMOMib5lxbyxZaElcZp8VAT9so 2021-07-13 1626206459
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] EXPKEYSIG EB774491D9FF06E2 Tor Browser Developers (signing key) <torbrowser@torproject.org>
[GNUPG:] VALIDSIG 110775B5D101FB36BC6C911BEB774491D9FF06E2 2021-07-13 1626206459 0 4 0 1 10 00 EF6E286DDA85EA2A4BA7DE684E2C6E8793298290
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] VERIFICATION_COMPLIANCE_MODE 23'
+ gpg_bash_lib_function_cleanup
+ trap gpg_bash_lib_function_error_handler ERR
+ '[' false = true ']'
+ gpg_bash_lib_function_deinit
+ trap gpg_bash_lib_function_error_handler ERR
+ '[' false = true ']'
+ true 'gpg_bash_lib_function_deinit: pipefail was enabled, leaving it as is for deinit.'
+ '[' true = true ']'
+ true 'gpg_bash_lib_function_deinit: errtrace has been disabled, enabling it for deinit.'
+ set -o errtrace
+ true 'gpg_bash_lib_function_deinit: restoring previously existing trap.'
+ trap tb_error_handler ERR
+ return 0
++ /usr/lib/msgcollector/br_add 'gpg_bash_lib_internal_gpg_verify_status_fd_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file
gpg_bash_lib_internal_gpg_verify_output_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_output_file
gpg_bash_lib_output_gpg_import_output:
gpg: keybox '\''/home/user/.cache/tb/gpgtmpdir/pubring.kbx'\'' created
gpg: key 4E2C6E8793298290: 1 duplicate signature removed
gpg: key 4E2C6E8793298290: 236 signatures not checked due to missing keys
gpg: key 4E2C6E8793298290: 1 signature reordered
gpg: /home/user/.cache/tb/gpgtmpdir/trustdb.gpg: trustdb created
gpg: key 4E2C6E8793298290: public key "Tor Browser Developers (signing key) <torbrowser@torproject.org>" imported
gpg: Total number processed: 1
gpg:               imported: 1
gpg: no ultimately trusted keys found
gpg_bash_lib_output_gpg_verify_output:
gpg: Signature made Tue 13 Jul 2021 08:00:59 PM UTC
gpg:                using RSA key EB774491D9FF06E2
gpg: Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>" [ultimate]
gpg: Note: This key has expired!
Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290
     Subkey fingerprint: 1107 75B5 D101 FB36 BC6C  911B EB77 4491 D9FF 06E2
gpg_bash_lib_output_gpg_verify_status_fd_output:
[GNUPG:] NEWSIG
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] SIG_ID rvMOMib5lxbyxZaElcZp8VAT9so 2021-07-13 1626206459
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] EXPKEYSIG EB774491D9FF06E2 Tor Browser Developers (signing key) <torbrowser@torproject.org>
[GNUPG:] VALIDSIG 110775B5D101FB36BC6C911BEB774491D9FF06E2 2021-07-13 1626206459 0 4 0 1 10 00 EF6E286DDA85EA2A4BA7DE684E2C6E8793298290
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] VERIFICATION_COMPLIANCE_MODE 23'
+ gpg_bash_lib_output_diagnostic_message='gpg_bash_lib_internal_gpg_verify_status_fd_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file<br />
gpg_bash_lib_internal_gpg_verify_output_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_output_file<br />
gpg_bash_lib_output_gpg_import_output:<br />
gpg: keybox '\''/home/user/.cache/tb/gpgtmpdir/pubring.kbx'\'' created<br />
gpg: key 4E2C6E8793298290: 1 duplicate signature removed<br />
gpg: key 4E2C6E8793298290: 236 signatures not checked due to missing keys<br />
gpg: key 4E2C6E8793298290: 1 signature reordered<br />
gpg: /home/user/.cache/tb/gpgtmpdir/trustdb.gpg: trustdb created<br />
gpg: key 4E2C6E8793298290: public key "Tor Browser Developers (signing key) <torbrowser@torproject.org>" imported<br />
gpg: Total number processed: 1<br />
gpg:               imported: 1<br />
gpg: no ultimately trusted keys found<br />
gpg_bash_lib_output_gpg_verify_output:<br />
gpg: Signature made Tue 13 Jul 2021 08:00:59 PM UTC<br />
gpg:                using RSA key EB774491D9FF06E2<br />
gpg: Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>" [ultimate]<br />
gpg: Note: This key has expired!<br />
Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290<br />
     Subkey fingerprint: 1107 75B5 D101 FB36 BC6C  911B EB77 4491 D9FF 06E2<br />
gpg_bash_lib_output_gpg_verify_status_fd_output:<br />
[GNUPG:] NEWSIG<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] SIG_ID rvMOMib5lxbyxZaElcZp8VAT9so 2021-07-13 1626206459<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] EXPKEYSIG EB774491D9FF06E2 Tor Browser Developers (signing key) <torbrowser@torproject.org><br />
[GNUPG:] VALIDSIG 110775B5D101FB36BC6C911BEB774491D9FF06E2 2021-07-13 1626206459 0 4 0 1 10 00 EF6E286DDA85EA2A4BA7DE684E2C6E8793298290<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] VERIFICATION_COMPLIANCE_MODE 23'
+ '[' '!' false = true ']'
+ local 'MSG=<p><b>Digital signature (GPG) could NOT be verified.</b>
<br></br>Tor Browser update failed! Try again later.</p>

<p>gpg_bash_lib_output_alright_status: false
<br></br>gpg_bash_lib_output_failure: </p>

<p>gpg_bash_lib_output_diagnostic_message:</p>

<p>gpg_bash_lib_internal_gpg_verify_status_fd_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file<br />
gpg_bash_lib_internal_gpg_verify_output_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_output_file<br />
gpg_bash_lib_output_gpg_import_output:<br />
gpg: keybox '\''/home/user/.cache/tb/gpgtmpdir/pubring.kbx'\'' created<br />
gpg: key 4E2C6E8793298290: 1 duplicate signature removed<br />
gpg: key 4E2C6E8793298290: 236 signatures not checked due to missing keys<br />
gpg: key 4E2C6E8793298290: 1 signature reordered<br />
gpg: /home/user/.cache/tb/gpgtmpdir/trustdb.gpg: trustdb created<br />
gpg: key 4E2C6E8793298290: public key "Tor Browser Developers (signing key) <torbrowser@torproject.org>" imported<br />
gpg: Total number processed: 1<br />
gpg:               imported: 1<br />
gpg: no ultimately trusted keys found<br />
gpg_bash_lib_output_gpg_verify_output:<br />
gpg: Signature made Tue 13 Jul 2021 08:00:59 PM UTC<br />
gpg:                using RSA key EB774491D9FF06E2<br />
gpg: Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>" [ultimate]<br />
gpg: Note: This key has expired!<br />
Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290<br />
     Subkey fingerprint: 1107 75B5 D101 FB36 BC6C  911B EB77 4491 D9FF 06E2<br />
gpg_bash_lib_output_gpg_verify_status_fd_output:<br />
[GNUPG:] NEWSIG<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] SIG_ID rvMOMib5lxbyxZaElcZp8VAT9so 2021-07-13 1626206459<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] EXPKEYSIG EB774491D9FF06E2 Tor Browser Developers (signing key) <torbrowser@torproject.org><br />
[GNUPG:] VALIDSIG 110775B5D101FB36BC6C911BEB774491D9FF06E2 2021-07-13 1626206459 0 4 0 1 10 00 EF6E286DDA85EA2A4BA7DE684E2C6E8793298290<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] VERIFICATION_COMPLIANCE_MODE 23</p>'
+ output --messagex --typex error --message '<p><b>Digital signature (GPG) could NOT be verified.</b>
<br></br>Tor Browser update failed! Try again later.</p>

<p>gpg_bash_lib_output_alright_status: false
<br></br>gpg_bash_lib_output_failure: </p>

<p>gpg_bash_lib_output_diagnostic_message:</p>

<p>gpg_bash_lib_internal_gpg_verify_status_fd_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file<br />
gpg_bash_lib_internal_gpg_verify_output_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_output_file<br />
gpg_bash_lib_output_gpg_import_output:<br />
gpg: keybox '\''/home/user/.cache/tb/gpgtmpdir/pubring.kbx'\'' created<br />
gpg: key 4E2C6E8793298290: 1 duplicate signature removed<br />
gpg: key 4E2C6E8793298290: 236 signatures not checked due to missing keys<br />
gpg: key 4E2C6E8793298290: 1 signature reordered<br />
gpg: /home/user/.cache/tb/gpgtmpdir/trustdb.gpg: trustdb created<br />
gpg: key 4E2C6E8793298290: public key "Tor Browser Developers (signing key) <torbrowser@torproject.org>" imported<br />
gpg: Total number processed: 1<br />
gpg:               imported: 1<br />
gpg: no ultimately trusted keys found<br />
gpg_bash_lib_output_gpg_verify_output:<br />
gpg: Signature made Tue 13 Jul 2021 08:00:59 PM UTC<br />
gpg:                using RSA key EB774491D9FF06E2<br />
gpg: Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>" [ultimate]<br />
gpg: Note: This key has expired!<br />
Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290<br />
     Subkey fingerprint: 1107 75B5 D101 FB36 BC6C  911B EB77 4491 D9FF 06E2<br />
gpg_bash_lib_output_gpg_verify_status_fd_output:<br />
[GNUPG:] NEWSIG<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] SIG_ID rvMOMib5lxbyxZaElcZp8VAT9so 2021-07-13 1626206459<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] EXPKEYSIG EB774491D9FF06E2 Tor Browser Developers (signing key) <torbrowser@torproject.org><br />
[GNUPG:] VALIDSIG 110775B5D101FB36BC6C911BEB774491D9FF06E2 2021-07-13 1626206459 0 4 0 1 10 00 EF6E286DDA85EA2A4BA7DE684E2C6E8793298290<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] VERIFICATION_COMPLIANCE_MODE 23</p>' --done
+ outputfunc --messagex --typex error --message '<p><b>Digital signature (GPG) could NOT be verified.</b>
<br></br>Tor Browser update failed! Try again later.</p>

<p>gpg_bash_lib_output_alright_status: false
<br></br>gpg_bash_lib_output_failure: </p>

<p>gpg_bash_lib_output_diagnostic_message:</p>

<p>gpg_bash_lib_internal_gpg_verify_status_fd_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file<br />
gpg_bash_lib_internal_gpg_verify_output_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_output_file<br />
gpg_bash_lib_output_gpg_import_output:<br />
gpg: keybox '\''/home/user/.cache/tb/gpgtmpdir/pubring.kbx'\'' created<br />
gpg: key 4E2C6E8793298290: 1 duplicate signature removed<br />
gpg: key 4E2C6E8793298290: 236 signatures not checked due to missing keys<br />
gpg: key 4E2C6E8793298290: 1 signature reordered<br />
gpg: /home/user/.cache/tb/gpgtmpdir/trustdb.gpg: trustdb created<br />
gpg: key 4E2C6E8793298290: public key "Tor Browser Developers (signing key) <torbrowser@torproject.org>" imported<br />
gpg: Total number processed: 1<br />
gpg:               imported: 1<br />
gpg: no ultimately trusted keys found<br />
gpg_bash_lib_output_gpg_verify_output:<br />
gpg: Signature made Tue 13 Jul 2021 08:00:59 PM UTC<br />
gpg:                using RSA key EB774491D9FF06E2<br />
gpg: Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>" [ultimate]<br />
gpg: Note: This key has expired!<br />
Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290<br />
     Subkey fingerprint: 1107 75B5 D101 FB36 BC6C  911B EB77 4491 D9FF 06E2<br />
gpg_bash_lib_output_gpg_verify_status_fd_output:<br />
[GNUPG:] NEWSIG<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] SIG_ID rvMOMib5lxbyxZaElcZp8VAT9so 2021-07-13 1626206459<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] EXPKEYSIG EB774491D9FF06E2 Tor Browser Developers (signing key) <torbrowser@torproject.org><br />
[GNUPG:] VALIDSIG 110775B5D101FB36BC6C911BEB774491D9FF06E2 2021-07-13 1626206459 0 4 0 1 10 00 EF6E286DDA85EA2A4BA7DE684E2C6E8793298290<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] VERIFICATION_COMPLIANCE_MODE 23</p>' --done
+ true 'outputfunc: args: --messagex' --typex error --message '<p><b>Digital signature (GPG) could NOT be verified.</b>
<br></br>Tor Browser update failed! Try again later.</p>

<p>gpg_bash_lib_output_alright_status: false
<br></br>gpg_bash_lib_output_failure: </p>

<p>gpg_bash_lib_output_diagnostic_message:</p>

<p>gpg_bash_lib_internal_gpg_verify_status_fd_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file<br />
gpg_bash_lib_internal_gpg_verify_output_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_output_file<br />
gpg_bash_lib_output_gpg_import_output:<br />
gpg: keybox '\''/home/user/.cache/tb/gpgtmpdir/pubring.kbx'\'' created<br />
gpg: key 4E2C6E8793298290: 1 duplicate signature removed<br />
gpg: key 4E2C6E8793298290: 236 signatures not checked due to missing keys<br />
gpg: key 4E2C6E8793298290: 1 signature reordered<br />
gpg: /home/user/.cache/tb/gpgtmpdir/trustdb.gpg: trustdb created<br />
gpg: key 4E2C6E8793298290: public key "Tor Browser Developers (signing key) <torbrowser@torproject.org>" imported<br />
gpg: Total number processed: 1<br />
gpg:               imported: 1<br />
gpg: no ultimately trusted keys found<br />
gpg_bash_lib_output_gpg_verify_output:<br />
gpg: Signature made Tue 13 Jul 2021 08:00:59 PM UTC<br />
gpg:                using RSA key EB774491D9FF06E2<br />
gpg: Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>" [ultimate]<br />
gpg: Note: This key has expired!<br />
Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290<br />
     Subkey fingerprint: 1107 75B5 D101 FB36 BC6C  911B EB77 4491 D9FF 06E2<br />
gpg_bash_lib_output_gpg_verify_status_fd_output:<br />
[GNUPG:] NEWSIG<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] SIG_ID rvMOMib5lxbyxZaElcZp8VAT9so 2021-07-13 1626206459<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] EXPKEYSIG EB774491D9FF06E2 Tor Browser Developers (signing key) <torbrowser@torproject.org><br />
[GNUPG:] VALIDSIG 110775B5D101FB36BC6C911BEB774491D9FF06E2 2021-07-13 1626206459 0 4 0 1 10 00 EF6E286DDA85EA2A4BA7DE684E2C6E8793298290<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] VERIFICATION_COMPLIANCE_MODE 23</p>' --done
+ '[' /usr/lib/msgcollector/msgcollector = '' ']'
+ '[' false = false ']'
+ true
+ case $1 in
+ return 0
+ local MSG_CLI
++ /usr/lib/msgcollector/striphtml '<p><b>Digital signature (GPG) could NOT be verified.</b>
<br></br>Tor Browser update failed! Try again later.</p>

<p>gpg_bash_lib_output_alright_status: false
<br></br>gpg_bash_lib_output_failure: </p>

<p>gpg_bash_lib_output_diagnostic_message:</p>

<p>gpg_bash_lib_internal_gpg_verify_status_fd_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file<br />
gpg_bash_lib_internal_gpg_verify_output_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_output_file<br />
gpg_bash_lib_output_gpg_import_output:<br />
gpg: keybox '\''/home/user/.cache/tb/gpgtmpdir/pubring.kbx'\'' created<br />
gpg: key 4E2C6E8793298290: 1 duplicate signature removed<br />
gpg: key 4E2C6E8793298290: 236 signatures not checked due to missing keys<br />
gpg: key 4E2C6E8793298290: 1 signature reordered<br />
gpg: /home/user/.cache/tb/gpgtmpdir/trustdb.gpg: trustdb created<br />
gpg: key 4E2C6E8793298290: public key "Tor Browser Developers (signing key) <torbrowser@torproject.org>" imported<br />
gpg: Total number processed: 1<br />
gpg:               imported: 1<br />
gpg: no ultimately trusted keys found<br />
gpg_bash_lib_output_gpg_verify_output:<br />
gpg: Signature made Tue 13 Jul 2021 08:00:59 PM UTC<br />
gpg:                using RSA key EB774491D9FF06E2<br />
gpg: Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>" [ultimate]<br />
gpg: Note: This key has expired!<br />
Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290<br />
     Subkey fingerprint: 1107 75B5 D101 FB36 BC6C  911B EB77 4491 D9FF 06E2<br />
gpg_bash_lib_output_gpg_verify_status_fd_output:<br />
[GNUPG:] NEWSIG<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] SIG_ID rvMOMib5lxbyxZaElcZp8VAT9so 2021-07-13 1626206459<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] EXPKEYSIG EB774491D9FF06E2 Tor Browser Developers (signing key) <torbrowser@torproject.org><br />
[GNUPG:] VALIDSIG 110775B5D101FB36BC6C911BEB774491D9FF06E2 2021-07-13 1626206459 0 4 0 1 10 00 EF6E286DDA85EA2A4BA7DE684E2C6E8793298290<br />
[GNUPG:] KEYEXPIRED 1503660203<br />
[GNUPG:] KEYEXPIRED 1503660390<br />
[GNUPG:] KEYEXPIRED 1535109984<br />
[GNUPG:] KEYEXPIRED 1641301932<br />
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0<br />
[GNUPG:] VERIFICATION_COMPLIANCE_MODE 23</p>'
+ MSG_CLI='Digital signature (GPG) could NOT be verified.
Tor Browser update failed! Try again later.

gpg_bash_lib_output_alright_status: false
gpg_bash_lib_output_failure: 

gpg_bash_lib_output_diagnostic_message:

gpg_bash_lib_internal_gpg_verify_status_fd_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file
gpg_bash_lib_internal_gpg_verify_output_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_output_file
gpg_bash_lib_output_gpg_import_output:
gpg: keybox '\''/home/user/.cache/tb/gpgtmpdir/pubring.kbx'\'' created
gpg: key 4E2C6E8793298290: 1 duplicate signature removed
gpg: key 4E2C6E8793298290: 236 signatures not checked due to missing keys
gpg: key 4E2C6E8793298290: 1 signature reordered
gpg: /home/user/.cache/tb/gpgtmpdir/trustdb.gpg: trustdb created
gpg: key 4E2C6E8793298290: public key "Tor Browser Developers (signing key) " imported
gpg: Total number processed: 1
gpg:               imported: 1
gpg: no ultimately trusted keys found
gpg_bash_lib_output_gpg_verify_output:
gpg: Signature made Tue 13 Jul 2021 08:00:59 PM UTC
gpg:                using RSA key EB774491D9FF06E2
gpg: Good signature from "Tor Browser Developers (signing key) " [ultimate]
gpg: Note: This key has expired!
Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290
     Subkey fingerprint: 1107 75B5 D101 FB36 BC6C  911B EB77 4491 D9FF 06E2
gpg_bash_lib_output_gpg_verify_status_fd_output:
[GNUPG:] NEWSIG
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] SIG_ID rvMOMib5lxbyxZaElcZp8VAT9so 2021-07-13 1626206459
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] EXPKEYSIG EB774491D9FF06E2 Tor Browser Developers (signing key) 
[GNUPG:] VALIDSIG 110775B5D101FB36BC6C911BEB774491D9FF06E2 2021-07-13 1626206459 0 4 0 1 10 00 EF6E286DDA85EA2A4BA7DE684E2C6E8793298290
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] VERIFICATION_COMPLIANCE_MODE 23'
+ echo 'ERROR: Digital signature (GPG) could NOT be verified.
Tor Browser update failed! Try again later.

gpg_bash_lib_output_alright_status: false
gpg_bash_lib_output_failure: 

gpg_bash_lib_output_diagnostic_message:

gpg_bash_lib_internal_gpg_verify_status_fd_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file
gpg_bash_lib_internal_gpg_verify_output_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_output_file
gpg_bash_lib_output_gpg_import_output:
gpg: keybox '\''/home/user/.cache/tb/gpgtmpdir/pubring.kbx'\'' created
gpg: key 4E2C6E8793298290: 1 duplicate signature removed
gpg: key 4E2C6E8793298290: 236 signatures not checked due to missing keys
gpg: key 4E2C6E8793298290: 1 signature reordered
gpg: /home/user/.cache/tb/gpgtmpdir/trustdb.gpg: trustdb created
gpg: key 4E2C6E8793298290: public key "Tor Browser Developers (signing key) " imported
gpg: Total number processed: 1
gpg:               imported: 1
gpg: no ultimately trusted keys found
gpg_bash_lib_output_gpg_verify_output:
gpg: Signature made Tue 13 Jul 2021 08:00:59 PM UTC
gpg:                using RSA key EB774491D9FF06E2
gpg: Good signature from "Tor Browser Developers (signing key) " [ultimate]
gpg: Note: This key has expired!
Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290
     Subkey fingerprint: 1107 75B5 D101 FB36 BC6C  911B EB77 4491 D9FF 06E2
gpg_bash_lib_output_gpg_verify_status_fd_output:
[GNUPG:] NEWSIG
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] SIG_ID rvMOMib5lxbyxZaElcZp8VAT9so 2021-07-13 1626206459
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] EXPKEYSIG EB774491D9FF06E2 Tor Browser Developers (signing key) 
[GNUPG:] VALIDSIG 110775B5D101FB36BC6C911BEB774491D9FF06E2 2021-07-13 1626206459 0 4 0 1 10 00 EF6E286DDA85EA2A4BA7DE684E2C6E8793298290
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] VERIFICATION_COMPLIANCE_MODE 23'
ERROR: Digital signature (GPG) could NOT be verified.
Tor Browser update failed! Try again later.

gpg_bash_lib_output_alright_status: false
gpg_bash_lib_output_failure: 

gpg_bash_lib_output_diagnostic_message:

gpg_bash_lib_internal_gpg_verify_status_fd_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_status_fd_file
gpg_bash_lib_internal_gpg_verify_output_file: /home/user/.cache/tb/gpgtmpdir/gpg_bash_lib_internal_gpg_verify_output_file
gpg_bash_lib_output_gpg_import_output:
gpg: keybox '/home/user/.cache/tb/gpgtmpdir/pubring.kbx' created
gpg: key 4E2C6E8793298290: 1 duplicate signature removed
gpg: key 4E2C6E8793298290: 236 signatures not checked due to missing keys
gpg: key 4E2C6E8793298290: 1 signature reordered
gpg: /home/user/.cache/tb/gpgtmpdir/trustdb.gpg: trustdb created
gpg: key 4E2C6E8793298290: public key "Tor Browser Developers (signing key) " imported
gpg: Total number processed: 1
gpg:               imported: 1
gpg: no ultimately trusted keys found
gpg_bash_lib_output_gpg_verify_output:
gpg: Signature made Tue 13 Jul 2021 08:00:59 PM UTC
gpg:                using RSA key EB774491D9FF06E2
gpg: Good signature from "Tor Browser Developers (signing key) " [ultimate]
gpg: Note: This key has expired!
Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290
     Subkey fingerprint: 1107 75B5 D101 FB36 BC6C  911B EB77 4491 D9FF 06E2
gpg_bash_lib_output_gpg_verify_status_fd_output:
[GNUPG:] NEWSIG
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] SIG_ID rvMOMib5lxbyxZaElcZp8VAT9so 2021-07-13 1626206459
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] EXPKEYSIG EB774491D9FF06E2 Tor Browser Developers (signing key) 
[GNUPG:] VALIDSIG 110775B5D101FB36BC6C911BEB774491D9FF06E2 2021-07-13 1626206459 0 4 0 1 10 00 EF6E286DDA85EA2A4BA7DE684E2C6E8793298290
[GNUPG:] KEYEXPIRED 1503660203
[GNUPG:] KEYEXPIRED 1503660390
[GNUPG:] KEYEXPIRED 1535109984
[GNUPG:] KEYEXPIRED 1641301932
[GNUPG:] KEY_CONSIDERED EF6E286DDA85EA2A4BA7DE684E2C6E8793298290 0
[GNUPG:] VERIFICATION_COMPLIANCE_MODE 23
+ tb_exit_function 12
+ trap '' ERR
+ local exit_code
+ exit_code=12
+ '[' 12 = 0 ']'
+ '[' '' = open ']'
+ '[' '' = true ']'
+ exit 12
user@host:~$

In past when the signing key was outdated users opened support requests because then installation failed.

If Tor Browser Internal Updater by The Tor Project can update Tor Browser, that’s a different software signature verification mechanism. Unspecific to Whonix.

Therefore I am confident this is not an issue of Tor Browser Downloader by Whonix.