GitLab

Upgrade our production and test-only tor configuration

Closes #18216

See merge request !363

Upgrade tor to 0.4.5.6

See merge request !361

Test suite: relax delay for OpenPGP future expiration date

See merge request !370

Sysadmins will implement a monitoring check (sysadmin#17816)
that will give them an advance warning to update these keys.

And then, this very test scenario will be about whether we did
import the key that was already updated by sysadmins.

This change avoids this scenario failing, potentially for a long time, until
sysadmins update the key, which is currently the case since 3 weeks.

I think we should do the same for Tails' APT repository keys, but let's first
ensure sysadmins will monitor this key as well.

refs #18170

wiki/src/news/version_4.14/broken_upgrades.ar.po: updating as wiki/src/news/version_4.14/broken_upgrades.de.po has changed.
wiki/src/news/version_4.14/broken_upgrades.ca.po: updating as wiki/src/news/version_4.14/broken_upgrades.de.po has changed.
wiki/src/news/version_4.14/broken_upgrades.id.po: updating as wiki/src/news/version_4.14/broken_upgrades.de.po has changed.
wiki/src/news/version_4.14/broken_upgrades.pl.po: updating as wiki/src/news/version_4.14/broken_upgrades.de.po has changed.
wiki/src/news/version_4.14/broken_upgrades.ru.po: updating as wiki/src/news/version_4.14/broken_upgrades.de.po has changed.
wiki/src/news/version_4.14/broken_upgrades.sr_Latn.po: updating as wiki/src/news/version_4.14/broken_upgrades.de.po has changed.
wiki/src/news/version_4.14/broken_upgrades.tr.po: updating as wiki/src/news/version_4.14/broken_upgrades.de.po has changed.
wiki/src/news/version_4.14/broken_upgrades.zh.po: updating as wiki/src/news/version_4.14/broken_upgrades.de.po has changed.
wiki/src/news/version_4.14/broken_upgrades.zh_TW.po: updating as wiki/src/news/version_4.14/broken_upgrades.de.po has changed.
wiki/src/news/version_4.16.ar.po: updating as wiki/src/news/version_4.16.de.po has changed.
wiki/src/news/version_4.16.ca.po: updating as wiki/src/news/version_4.16.de.po has changed.
wiki/src/news/version_4.16.id.po: updating as wiki/src/news/version_4.16.de.po has changed.
wiki/src/news/version_4.16.pl.po: updating as wiki/src/news/version_4.16.de.po has changed.
wiki/src/news/version_4.16.ru.po: updating as wiki/src/news/version_4.16.de.po has changed.
wiki/src/news/version_4.16.sr_Latn.po: updating as wiki/src/news/version_4.16.de.po has changed.
wiki/src/news/version_4.16.tr.po: updating as wiki/src/news/version_4.16.de.po has changed.
wiki/src/news/version_4.16.zh.po: updating as wiki/src/news/version_4.16.de.po has changed.
wiki/src/news/version_4.16.zh_TW.po: updating as wiki/src/news/version_4.16.de.po has changed.

For context, see 069474a3 and !364.

The 4.16 release process was done with po4a >= 0.58, which causes trouble:

  https://jenkins.tails.boum.org/view/RM/job/check_PO_master/7049/console
  https://gitlab.tails.boum.org/tails/tails/-/jobs/9110

chutney@364534a3 bumped this setting from
0.25 to 0.67. I'm inclined to trust their reasoning.

refs #18216

When TestingTorNetwork is set to 1, tor defaults to
"TestingBridgeDownloadInitialDelay 10", while it defaults to 0 for all
other *DownloadInitialDelay options. Chutney does not override this.

Let's assume they both have good reasons until we know why we know better :)

refs #18216

"0" is the default value for these 2 options when TestingTorNetwork is set to 1,
which is the case here.

refs #18216

Since tor 0.2.9, all values after the first are ignored.

refs #18216

These options were renamed in tor 0.3.4.1-alpha. The old names are still
allowed, but produce a warning which clutters the tor logs in our test suite.

refs #18216

From the tor 0.3.1.1-alpha changelog entry:

"
    - These configuration options are now marked Obsolete, and no longer
      have any effect: AllowInvalidNodes, AllowSingleHopCircuits,
      AllowSingleHopExits, ExcludeSingleHopRelays, FastFirstHopPK,
      TLSECGroup, WarnUnsafeSocks. They were first marked as deprecated
      in 0.2.9.2-alpha and have now been removed. The previous default
      behavior is now always chosen; the previous (less secure) non-
      default behavior is now unavailable.
"

refs #18216

refs #18216

wiki/src/news/version_4.14/broken_upgrades.ar.po: adding as wiki/src/news/version_4.14/broken_upgrades.de.po has added.
wiki/src/news/version_4.14/broken_upgrades.ca.po: adding as wiki/src/news/version_4.14/broken_upgrades.de.po has added.
wiki/src/news/version_4.14/broken_upgrades.id.po: adding as wiki/src/news/version_4.14/broken_upgrades.de.po has added.
wiki/src/news/version_4.14/broken_upgrades.pl.po: adding as wiki/src/news/version_4.14/broken_upgrades.de.po has added.
wiki/src/news/version_4.14/broken_upgrades.ru.po: adding as wiki/src/news/version_4.14/broken_upgrades.de.po has added.
wiki/src/news/version_4.14/broken_upgrades.sr_Latn.po: adding as wiki/src/news/version_4.14/broken_upgrades.de.po has added.
wiki/src/news/version_4.14/broken_upgrades.tr.po: adding as wiki/src/news/version_4.14/broken_upgrades.de.po has added.
wiki/src/news/version_4.14/broken_upgrades.zh.po: adding as wiki/src/news/version_4.14/broken_upgrades.de.po has added.
wiki/src/news/version_4.14/broken_upgrades.zh_TW.po: adding as wiki/src/news/version_4.14/broken_upgrades.de.po has added.
wiki/src/news/version_4.16.ar.po: adding as wiki/src/news/version_4.16.de.po has added.
wiki/src/news/version_4.16.ca.po: adding as wiki/src/news/version_4.16.de.po has added.
wiki/src/news/version_4.16.id.po: adding as wiki/src/news/version_4.16.de.po has added.
wiki/src/news/version_4.16.pl.po: adding as wiki/src/news/version_4.16.de.po has added.
wiki/src/news/version_4.16.ru.po: adding as wiki/src/news/version_4.16.de.po has added.
wiki/src/news/version_4.16.sr_Latn.po: adding as wiki/src/news/version_4.16.de.po has added.
wiki/src/news/version_4.16.tr.po: adding as wiki/src/news/version_4.16.de.po has added.
wiki/src/news/version_4.16.zh.po: adding as wiki/src/news/version_4.16.de.po has added.
wiki/src/news/version_4.16.zh_TW.po: adding as wiki/src/news/version_4.16.de.po has added.
wiki/src/security/known_security_vulnerabilities_in_4.15.1.ar.po: adding as wiki/src/security/known_security_vulnerabilities_in_4.15.1.de.po has added.
wiki/src/security/known_security_vulnerabilities_in_4.15.1.ca.po: adding as wiki/src/security/known_security_vulnerabilities_in_4.15.1.de.po has added.
wiki/src/security/known_security_vulnerabilities_in_4.15.1.id.po: adding as wiki/src/security/known_security_vulnerabilities_in_4.15.1.de.po has added.
wiki/src/security/known_security_vulnerabilities_in_4.15.1.pl.po: adding as wiki/src/security/known_security_vulnerabilities_in_4.15.1.de.po has added.
wiki/src/security/known_security_vulnerabilities_in_4.15.1.ru.po: adding as wiki/src/security/known_security_vulnerabilities_in_4.15.1.de.po has added.
wiki/src/security/known_security_vulnerabilities_in_4.15.1.sr_Latn.po: adding as wiki/src/security/known_security_vulnerabilities_in_4.15.1.de.po has added.
wiki/src/security/known_security_vulnerabilities_in_4.15.1.tr.po: adding as wiki/src/security/known_security_vulnerabilities_in_4.15.1.de.po has added.
wiki/src/security/known_security_vulnerabilities_in_4.15.1.zh.po: adding as wiki/src/security/known_security_vulnerabilities_in_4.15.1.de.po has added.
wiki/src/security/known_security_vulnerabilities_in_4.15.1.zh_TW.po: adding as wiki/src/security/known_security_vulnerabilities_in_4.15.1.de.po has added.
wiki/src/news/version_4.15.1.ar.po: updating as wiki/src/news/version_4.15.1.de.po has changed.
wiki/src/news/version_4.15.1.ca.po: updating as wiki/src/news/version_4.15.1.de.po has changed.
wiki/src/news/version_4.15.1.id.po: updating as wiki/src/news/version_4.15.1.de.po has changed.
wiki/src/news/version_4.15.1.pl.po: updating as wiki/src/news/version_4.15.1.de.po has changed.
wiki/src/news/version_4.15.1.ru.po: updating as wiki/src/news/version_4.15.1.de.po has changed.
wiki/src/news/version_4.15.1.sr_Latn.po: updating as wiki/src/news/version_4.15.1.de.po has changed.
wiki/src/news/version_4.15.1.tr.po: updating as wiki/src/news/version_4.15.1.de.po has changed.
wiki/src/news/version_4.15.1.zh.po: updating as wiki/src/news/version_4.15.1.de.po has changed.
wiki/src/news/version_4.15.1.zh_TW.po: updating as wiki/src/news/version_4.15.1.de.po has changed.
wiki/src/news/version_4.15.ar.po: updating as wiki/src/news/version_4.15.de.po has changed.
wiki/src/news/version_4.15.ca.po: updating as wiki/src/news/version_4.15.de.po has changed.
wiki/src/news/version_4.15.id.po: updating as wiki/src/news/version_4.15.de.po has changed.
wiki/src/news/version_4.15.pl.po: updating as wiki/src/news/version_4.15.de.po has changed.
wiki/src/news/version_4.15.ru.po: updating as wiki/src/news/version_4.15.de.po has changed.
wiki/src/news/version_4.15.sr_Latn.po: updating as wiki/src/news/version_4.15.de.po has changed.
wiki/src/news/version_4.15.tr.po: updating as wiki/src/news/version_4.15.de.po has changed.
wiki/src/news/version_4.15.zh.po: updating as wiki/src/news/version_4.15.de.po has changed.
wiki/src/news/version_4.15.zh_TW.po: updating as wiki/src/news/version_4.15.de.po has changed.

refs #18190

refs #18190

Without this, APT won't be able to install the current QEMU backport,
which requires a newer libfdt1 than previously (not-)pinned.

refs #18190

Currently translated at 4.9% (3 of 61 strings)

Translation: Tails/wiki/src/support/help_desk_standard_replies.*.po
Translate-URL: http://translate.tails.boum.org/projects/tails/wikisrcsupporthelp_desk_standard_repliespo/es/

Currently translated at 6.4% (2 of 31 strings)

Translation: Tails/wiki/src/news/version_4.15.1.*.po
Translate-URL: http://translate.tails.boum.org/projects/tails/wikisrcnewsversion_4151po/id/

Currently translated at 20.0% (1 of 5 strings)

Translation: Tails/wiki/src/security/known_security_vulnerabilities_in_4.15.*.po
Translate-URL: http://translate.tails.boum.org/projects/tails/wikisrcsecurityknown_security_vulnerabilities_in_415po/id/

Currently translated at 9.6% (3 of 31 strings)

Translation: Tails/wiki/src/news/version_4.15.1.*.po
Translate-URL: http://translate.tails.boum.org/projects/tails/wikisrcnewsversion_4151po/ar/

Currently translated at 20.0% (1 of 5 strings)

Translation: Tails/wiki/src/security/known_security_vulnerabilities_in_4.14.*.po
Translate-URL: http://translate.tails.boum.org/projects/tails/wikisrcsecurityknown_security_vulnerabilities_in_414po/id/

Currently translated at 9.0% (2 of 22 strings)

Translation: Tails/wiki/src/news/plans_for_2021.*.po
Translate-URL: http://translate.tails.boum.org/projects/tails/wikisrcnewsplans_for_2021po/pt/

Currently translated at 9.0% (2 of 22 strings)

Translation: Tails/wiki/src/news/plans_for_2021.*.po
Translate-URL: http://translate.tails.boum.org/projects/tails/wikisrcnewsplans_for_2021po/id/