Hi,

..I tried to ":~$ reportbug torbrowser-launcher
*** Welcome to reportbug. Use ? for help at prompts. ***
Note: bug reports are publicly archived (including the email address of
the submitter). Detected character set: UTF-8
Please change your locale if this is incorrect.

Using 'arnt <arnt@???>' as your from address.
Getting status for torbrowser-launcher...
Verifying package integrity...
Will send report to Devuan (per lsb_release).
Querying Devuan BTS for reports on torbrowser-launcher (source)...
Unable to connect to Devuan BTS; continue [y|N|?]? "

..on my first try, I got this:" reportbug torbrowser-launcher
*** Welcome to reportbug. Use ? for help at prompts. ***
Note: bug reports are publicly archived (including the email address of
the submitter). Detected character set: UTF-8
Please change your locale if this is incorrect.

..snip&paste https://pastebin.com/Xw8T9ALM

Bug report submitted to: "Devuan Bug Tracking System"
<submit@???> Copies sent to:
Devuan Bug Tracking System <submit@???>
arnt <arnt@???>"

..torbrowser-launcher DL AFAIUI, these 3 files:
arnt@box:~/.cache/torbrowser/download$ ll
total 69412
-rw-r--r-- 1 arnt arnt      639 May 13 15:31 release.xml
-rw-r--r-- 1 arnt arnt 71067320 May 13 15:33
tor-browser-linux64-6.5.2_en-US.tar.xz 
-rw-r--r-- 1 arnt arnt      801 May 13 15:31
tor-browser-linux64-6.5.2_en-US.tar.xz.asc
arnt@box:~/.cache/torbrowser/download$ md5sum *
fbfcd582a25944667062a17cf30eea7e  release.xml
cc61386f90087e0ceb81e0461905701a tor-browser-linux64-6.5.2_en-US.tar.xz 
3b42c73785524542cf0b213933ceae48
tor-browser-linux64-6.5.2_en-US.tar.xz.asc

..since Micah disses md5sum as broken, I shot these too
into the attached jacksums: (https://pastebin.com/KzncDm3F)
arnt@box:~$ jacksum -a all -m jacksums
Jacksum: Meta-Info:
version=1.7.0;algorithm=adler32+cksum+crc16+crc24+crc32+crc32_bzip2+crc32_mpeg2+crc64+crc8+ed2k+elf+fcs16+gost+has160+haval_128_3+haval_128_4+haval_128_5+haval_160_3+haval_160_4+haval_160_5+haval_192_3+haval_192_4+haval_192_5+haval_224_3+haval_224_4+haval_224_5+haval_256_3+haval_256_4+haval_256_5+md2+md4+md5+ripemd128+ripemd160+ripemd256+ripemd320+sha0+sha1+sha224+sha256+sha384+sha512+sum16+sum24+sum32+sum8+sumbsd+sumsysv+tiger+tiger128+tiger160+tiger2+tree:tiger+tree:tiger2+whirlpool0+whirlpool1+whirlpool2+xor8;filesep=/;encoding=hex;
Jacksum: Comment: created with Jacksum 1.7.0,
http://jacksum.sourceforge.net
Jacksum: Comment: created on Sat May 13 20:16:07 UTC 2017
Jacksum: Comment: os name=Linux;os version=4.9.0-0.bpo.2-rt-amd64;os
arch=amd64
Jacksum: Comment: jvm vendor=Oracle Corporation;jvm version=24.121-b00
Jacksum: Comment: user dir=/home/arnt
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
15252 jacksums arnt@d44:~$

..our (devuan) torbrowser-launcher bug was filed as
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852732
and fixed there, possibly like this:
'gpg --keyserver pgp.mit.edu --homedir \
"$HOME/.local/share/torbrowser/gnupg_homedir/" \
--refresh-keys ' in:
https://github.com/micahflee/torbrowser-launcher/issues/260

...which leaves me with 3 questions:
Did my bug report make it into Devuan BTS? No, says:
https://bugs.devuan.org//cgi/pkgreport.cgi?which=pkg&data=torbrowser-launcher
Are my checksums in jacksums, correct?
Are there arternatives to https://check.torproject.org/ so we
can get other 3rd-party opinions on Tor browser integrity?


--
..med vennlig hilsen = with Kind Regards from Arnt Karlsen
...with a number of polar bear hunters in his ancestry...
Scenarios always come in sets of three:
best case, worst case, and just in case.