Bug #7552

Firefox extension to automatically verify the ISO checksum

Added by sajolida 2014-07-10 21:30:57 . Updated 2018-04-08 16:46:35 .

Status:
Resolved
Priority:
Normal
Assignee:
ma1
Category:
Installation
Target version:
Start date:
2015-01-06
Due date:
% Done:

100%

Feature Branch:
Type of work:
Code
Blueprint:

https://tails.boum.org/blueprint/bootstrapping/extension/

Starter:
0
Affected tool:
ISO Verification Extension
Deliverable for:

Description

We are planning to create a custom Firefox add-on to download and verify Tails using SHA-256 checksum.

Subtasks

Feature #8564: Design a wireframe of the ISO verification extension Resolved

100
Feature #8566: Web prototype of "download and verify" page Resolved

100
Feature #8567: Write a first version of the ISO verification extension Resolved

100
Feature #8568: Integrate the ISO verification extension in the web assistant's prototype Resolved

0
Feature #8569: Have prototype of the ISO verification extension tested by users Resolved tchou

100
Feature #8570: Release the ISO verification Firefox extension on addons.mozilla.org Resolved

0
Feature #8849: Technical specifications for ISO verification extension Resolved

100
Feature #9295: Find a name for the download extension Resolved sajolida

0
Bug #9387: Browser and extension detection code Resolved

100
Feature #10366: Replace /download with a page with the download extension Rejected

0
Feature #10510: Automate generatation of the ISO descrption file in the release process Resolved

100
Feature #10530: Integrate ISO verification extension in assistant Duplicate

100

Related issues

Related to Tails - Feature #7496: Make it possible to verify the integrity of a Tails USB device In Progress 2014-07-06
Related to Tails - Bug #8531: Port DAVE to Chromium extension Rejected 2015-01-05
Blocked by Tails - Feature #8581: Analyse and simplify the installation and upgrade workflows Resolved 2014-04-07
Blocks Tails - Feature #8822: Package ISO verification Firefox extension for Debian Rejected 2015-01-29

History

#1 Updated by BitingBird 2014-07-19 21:10:30

  • Assignee set to ma1

Set ma1 as assignee, according to his mail request :)

#2 Updated by intrigeri 2014-07-20 15:06:13

  • Target version set to Sustainability_M1

(Flagging for 2.0, just like its parent ticket.)

#3 Updated by intrigeri 2014-07-29 14:03:48

  • related to Feature #7496: Make it possible to verify the integrity of a Tails USB device added

#4 Updated by BitingBird 2015-01-05 15:57:01

  • related to Bug #8531: Port DAVE to Chromium extension added

#5 Updated by intrigeri 2015-01-06 14:18:16

  • blocks #8538 added

#6 Updated by sajolida 2015-01-09 19:58:27

  • blocked by Feature #8581: Analyse and simplify the installation and upgrade workflows added

#7 Updated by sajolida 2015-02-02 14:14:20

  • blocks Feature #8822: Package ISO verification Firefox extension for Debian added

#8 Updated by sajolida 2015-02-21 19:11:46

  • Affected tool set to ISO Verification Extension

#9 Updated by intrigeri 2015-06-03 20:06:29

sajolida, perhaps it’s time to update the milestones for this ticket and maybe a few other ones, so that it’s easier (e.g. for people who are waiting to work on Bug #8531, and to people we’re telling it’s “coming soon”) to understand what’s the timeline?

#10 Updated by ma1 2015-06-03 20:38:20

  • Blueprint changed from https://tails.boum.org/blueprint/download_extension/ to https://tails.boum.org/blueprint/bootstrapping/extension/

As I told sajolida on the public list, while I do hope to have a prototype earlier, a realistic date is the beginning of August.
(Side note: the Blueprint link gave 404, changing it to what I’ve got).

#11 Updated by sajolida 2015-06-05 18:36:18

  • Target version changed from Sustainability_M1 to Tails_1.7

#12 Updated by sajolida 2015-11-02 15:17:49

  • Target version changed from Tails_1.7 to Tails_1.8

#13 Updated by ma1 2015-11-07 20:13:00

I’m currently having a bad time at updating the git repository, looks like my credentials are outdated.

The extension and the sniffing code work fine regarding:

1. certificate pinning
2. UI population from the safe data sources (e.g. download link and hash)
3. asynchronous sha256 verification of arbitrary local files (“I already have an ISO image” link)
4. revealing the verified file in the filesystem explorer (e.g. “Copy image to first USB stick”).

What is currently broken is the synchronization with the download manager, but I hope to have it fixed by Monday.

Until I do it and figure out how to update the repo, you can play with both the web page prototype and the extension at

https://maone.net/dev/tails/download.html

and download the sources from

https://maone.net/dev/tails/src/dave-0.0.5.zip

#14 Updated by sajolida 2015-12-17 09:27:31

  • Target version changed from Tails_1.8 to Tails_2.0

#15 Updated by sajolida 2016-01-29 18:21:22

  • Status changed from Confirmed to Resolved
  • Target version deleted (Tails_2.0)

All the subtasks for this are closed now and thhe assistant and the extension were release. So let’s close this big ticket. Congrats!