<p>Use a <code>netlayer</code> version that includes tor binaries extracted from the latest tor browser <a href="https://dist.torproject.org/torbrowser/9.5.4/" rel="nofollow">v9.5.4</a>.</p>
<p>For simplicity:</p>
<ul>
<li>use <a href="https://jitpack.io/#cd2357/netlayer/cdbe476" rel="nofollow">netlayer version cdbe476</a> (based on commit <code>cdbe476</code> from <a href="https://github.com/cd2357/netlayer/commits/upgrade-tor-binary-0.4.3.8-on-v0.6.8">this branch</a>)
<ul>
<li>the referenced branch = previously used <code>netlayer</code> v0.6.8 + a change to use following <code>tor-binary</code></li>
</ul>
</li>
<li>above <code>netlayer</code> bumps <code>tor-binary</code> dependency to <a href="https://jitpack.io/#cd2357/tor-binary/f3bc31f" rel="nofollow">f3bc31f</a> (based on commit <code>f3bc31f</code> from <a href="https://github.com/cd2357/tor-binary/commits/upgrade-tor-9.5.4">this branch</a>)
<ul>
<li>the referenced branch = previously used <code>tor-binary</code> dependency + change A + change B
<ul>
<li>change A: extract tor binaries from <code>tor-browser</code> v9.5.4 (instead of 9.5.3 used previously)</li>
<li>change B: update the extraction and build process to check if the <code>SHA-256</code> hashes of the <code>tor-browser</code> binaries match <a href="https://dist.torproject.org/torbrowser/9.5.4/sha256sums-signed-build.txt" rel="nofollow">the official ones</a> (instead of <code>SHA-512</code> hashes used previously, which are not published in the official tor repo anymore)
<ul>
<li>this ensures the build only succeeds if the downloaded <code>tor-browser</code> binaries (used to extract the tor binaries) match the official checksums</li>
</ul>
</li>
</ul>
</li>
</ul>
</li>
</ul>
<p>Note: The tor binaries in <code>tor-browser</code> v9.5.4 are the same version as from v9.5.3 (namely tor v0.4.3.6, as per <a href="https://gitweb.torproject.org/builders/tor-browser-build.git/plain/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt?h=maint-9.5" rel="nofollow">the tor-browser changelog</a>).</p>
<p>So this PR doesn't bring or change any tor or netlayer functionality. It only ensures that the used tor binaries were extracted from verified <code>tor-browser</code> packages. The tor binaries are delivered as dependencies of <code>netlayer</code>.</p>
<p><span class="issue-keyword tooltipped tooltipped-se" aria-label="This pull request closes issue #4593.">Fixes</span> <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="714056942" data-permission-text="Title is private" data-url="https://github.com/bisq-network/bisq/issues/4593" data-hovercard-type="issue" data-hovercard-url="/bisq-network/bisq/issues/4593/hovercard" href="https://github.com/bisq-network/bisq/issues/4593">#4593</a></p>

<hr>

<h4>You can view, comment on, or merge this pull request online at:</h4>
<p>  <a href='https://github.com/bisq-network/bisq/pull/4601'>https://github.com/bisq-network/bisq/pull/4601</a></p>

<h4>Commit Summary</h4>
<ul>
  <li>Bump netlayer to use tor binary from tor browser v9.5.4</li>
</ul>

<h4>File Changes</h4>
<ul>
  <li>
    <strong>M</strong>
    <a href="https://github.com/bisq-network/bisq/pull/4601/files#diff-c197962302397baf3a4cc36463dce5ea">build.gradle</a>
    (6)
  </li>
  <li>
    <strong>M</strong>
    <a href="https://github.com/bisq-network/bisq/pull/4601/files#diff-d5a9251f678d7f964871b83c050aa9a7">gradle/witness/gradle-witness.gradle</a>
    (16)
  </li>
</ul>

<h4>Patch Links:</h4>
<ul>
  <li><a href='https://github.com/bisq-network/bisq/pull/4601.patch'>https://github.com/bisq-network/bisq/pull/4601.patch</a></li>
  <li><a href='https://github.com/bisq-network/bisq/pull/4601.diff'>https://github.com/bisq-network/bisq/pull/4601.diff</a></li>
</ul>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/bisq-network/bisq/pull/4601">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AJFFTNV6IH7EZQUP5NZGIZTSJMW6RANCNFSM4SGE3VGQ">unsubscribe</a>.<img src="https://github.com/notifications/beacon/AJFFTNUOXT3K4PD7L7FGNY3SJMW6RA5CNFSM4SGE3VG2YY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4KVJXRTA.gif" height="1" width="1" alt="" /></p>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/bisq-network/bisq/pull/4601",
"url": "https://github.com/bisq-network/bisq/pull/4601",
"name": "View Pull Request"
},
"description": "View this Pull Request on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>