31

Installing Tor bundle from Ubuntu Software center on 16.04.

I have searched for similar cases. But only found one post, that was marked as a duplicate... But, it doesn't tell you where the duplicate is OR what the title of the duplicate is. And, I couldn't find it anywhere.

When starting the Tor Browser from the system menu (I am currently using the MATE distro of 16.04) It starts a "download" of the Tor browser. (Which is already installed from the USC...?) And, once it is finished with that, about five minutes later, I get "SIGNATURE VERIFICATION FAILED - You might be under attack, or there might just be a networking problem."

OK, So, I deactivate UFW, and the firewall on my router... then click "start" to retry the download... Now, with NO firewall active, another five minutes later, I receive the same error.

The purpose for using TOR is that I want to use an application called RetroShare with family and friends on other continents. The app requires a TOR "secrethidden space" and it's X.onion address in order to work. But, I cannot for the life of me figure out what the problem is with this TOR Browser. Documentation is (intentionally?) cryptic. It says to "do XYZ" with no hint whatsoever HOW to do XYZ or what it even means to "do XYZ".

Anyway, I have tried to follow reasonable methodology as far as I am able. But, the failures provide no clue as to what steps need to be taken to avoid the error happening over and over again. If it isn't firewall, I have no clue how to proceed.

Orian
  • 1,200
  • 1
    try this – George Udosen Feb 08 '17 at 08:12
  • Not seeing anything new there. The "tor bundle" has already been installed. This error is produced by actually attempting to RUN the tor browser... I'm not at all clear on why it is attempting to download the tor browser again... The docs are very unclear as to what is supposed to happen. – Orian Feb 08 '17 at 09:14
  • What does which tor give you ? – George Udosen Feb 08 '17 at 09:20
  • the reply is "/usr/sbin/tor" – Orian Feb 08 '17 at 09:22
  • ok try this rm -rf ~/.cache/torbrowser ~/.local/share/torbrowser ~/.config/torbrowser, and try again. – George Udosen Feb 08 '17 at 09:23
  • 1
    @George: Apologies... You were correct. I uninstalled (purged) and reinstalled following the instructions on the TorProjects site (instead of using the Ubuntu Software Center) as you originally suggested. The Browser now connects. But, I seem no closer to my goal. where is Vidalia? And, how does one go about setting up this "Hidden Service" that I need? Once again, I though it would be obvious once Tor was installed. – Orian Feb 08 '17 at 10:23
  • 1
    OK... I have read my eyes raw. Finally found all the pieces to creating and using a hidden service with Tor. Didn't expect that I would need to install a http server. But, there it is. Thanks for helping to get Tor Browser running. – Orian Feb 08 '17 at 13:42
  • Could not understand why the verification is failing. Anyway, the tor package being downloaded is the bundle, and will be installed in /opt/, so, you can just torbrowser-launcher on the terminal then grab the url from the output. Of course, you can go website and download the tar file corresponding on your system. Extract the package into /opt then modify *.desktop with right path. U can copy that .desktop file into ~/.local/share/applications/ and it will be visible on your menu. – m3nda Mar 04 '17 at 16:06
  • XUbuntu18.04 - the only thing that worked for me was direct download and install. https://www.torproject.org/dist/torbrowser/8.5.4/tor-browser-linux64-8.5.4_en-US.tar.xz YAY TOR! – rivermonk Aug 27 '19 at 15:25
  • Update gpg to 2.2.17 or newer. (how to) – Alexey Burdin Oct 16 '19 at 09:43

4 Answers4

42

This is due to an outdated key for verifying the torbrowser-launcher download. Try:

gpg --homedir "$HOME/.local/share/torbrowser/gnupg_homedir/" --refresh-keys --keyserver pgp.mit.edu

This worked fine in my case and I was able to successfully launch the tor browser.

Duplicate: https://unix.stackexchange.com/questions/341513/torbrowser-signature-verification-fails-a-glitch-or-an-attack/341519

Betty Von Schmartenhausen
  • 1,160
9

It's fixed in the latest version of torbrowser-launcher. Add the author's PPA to get the update:

sudo add-apt-repository ppa:micahflee/ppa
Diego V
  • 410
  • 2
    This worked after I tried a half dozen other attempted solutions. The answer deserves more up votes. – darkhipo Aug 13 '19 at 06:18
  • maybe try to wait little bit more after you executed gpg --homedir "$HOME/.local/share/torbrowser/gnupg_homedir/" --refresh-keys --keyserver pgp.mit.edu – x-magix Sep 01 '20 at 08:27
7

Try the following:

gpg --homedir "$HOME/.local/share/torbrowser/gnupg_homedir" --refresh-keys --keyserver keyserver.ubuntu.com

It worked for me on ubuntu 16.04

Alexander Noskov
  • 71
0

Debian 9 parrot OS has the same problem. It was fixed for me by completely purging tor and installing the tor browser bundle from torproject.org. It's a pretty straightforward process. Download the matching version for your system architecture. Extract the file to wherever. Open the extracted folder and you will find a setup application labeled something like setup-tor-browser... Launch and follow prompts. Also please note that your time needs to be correct, and you cannot run tor as root unless you edit the start-tor-browser file to allow for it. Note that you can still use proxychains with this configuration.

user661719
  • 1