[Pkg-privacy-maintainers] Bug#977730: torbrowser-launcher: Signature verification failed, key expired

[Jean-Michel Vourgère]

Package: torbrowser-launcher
Version: 0.3.3-3
Severity: important

Dear Maintainer,

When installing on a fresh bullseye, torbrowser is downloaded, then this
message is printed:

> SIGNATURE VERIFICATION FAILED
> 
> Error Code: 110775B5(...)FF07E2: Key expired
>
> You might be under attack, there might be a network problem, or you
> might be missing a recently added Tor Browser verification key.
>
> A copy of Tor (...)

I expected the download to succeed, obviously.

Thanks

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (500, 'testing'), (100, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.9.0-4-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages torbrowser-launcher depends on:
ii  ca-certificates    20200601
ii  gnupg              2.2.20-1
ii  libdbus-glib-1-2   0.110-5
ii  python3            3.9.0-4
ii  python3-gpg        1.14.0-1+b2
ii  python3-packaging  20.4-1
ii  python3-pyqt5      5.15.2+dfsg-1+b1
ii  python3-requests   2.24.0+dfsg-1
ii  python3-socks      1.7.1+dfsg-1

Versions of packages torbrowser-launcher recommends:
ii  tor  0.4.4.6-1

Versions of packages torbrowser-launcher suggests:
ii  apparmor  2.13.5-1+b2

-- no debconf information