Welcome! Log In Create A New Profile

Advanced

[PHP-DEV] PHP 7.1.19 - where are the gpg signatures?

Posted by Helmut K. C. Tessarek 
Helmut K. C. Tessarek
[PHP-DEV] PHP 7.1.19 - where are the gpg signatures?
June 25, 2018 02:00PM
Hello,

The gpg signatures for the PHP 7.1.19 source tarballs are missing.

Cheers,
K. C.

--
regards Helmut K. C. Tessarek KeyID 0x172380A011EF4944
Key fingerprint = 8A55 70C1 BD85 D34E ADBC 386C 1723 80A0 11EF 4944

/*
Thou shalt not follow the NULL pointer for chaos and madness
await thee at its end.
*/
On Mon, Jun 25, 2018 at 6:53 AM, Helmut K. C. Tessarek
<[email protected]> wrote:
> The gpg signatures for the PHP 7.1.19 source tarballs are missing.
>
Looks like Joe accidentally generated unarmored .sig files instead of
the usual .asc file.

Joe, could you re-issue the signatures as .asc files? I could
probably convert these (it's mostly just base64 and a little CRC32
magic), but it'd be better done using the proper tooling.

Thanks for checking the signatures, Helmut, and double-thanks for
letting us know!

-Sara

--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php
Helmut K. C. Tessarek
Re: [PHP-DEV] PHP 7.1.19 - where are the gpg signatures?
June 25, 2018 04:50PM
On 2018-06-25 16:34, Sara Golemon wrote:
> Looks like Joe accidentally generated unarmored .sig files instead of
> the usual .asc file.

Ah, ok. .sig files are perfectly fine, too.
I just didn't see the links, nor the .sig files, since no servers with
php sources seem to allow directory listing.

The .sig files were synced to the mirrors, so only the links on the web
site are missing.
(http://php.net/get/php-7.1.19.tar.xz.sig/from/a/mirror works)

Thanks for looking into this.

Cheers,
K. C.

--
regards Helmut K. C. Tessarek KeyID 0x172380A011EF4944
Key fingerprint = 8A55 70C1 BD85 D34E ADBC 386C 1723 80A0 11EF 4944

/*
Thou shalt not follow the NULL pointer for chaos and madness
await thee at its end.
*/
On Mon, Jun 25, 2018 at 9:48 AM, Helmut K. C. Tessarek
<[email protected]> wrote:
> On 2018-06-25 16:34, Sara Golemon wrote:
> Ah, ok. .sig files are perfectly fine, too.
> I just didn't see the links, nor the .sig files, since no servers with
> php sources seem to allow directory listing.
>
Yeah, we don't normally publish unarmored signatures 'cause the base64
versions tend to be more portable. He literally just missed a switch
on a command line.
Anyway, he's pushed new ASC signatures and they should be syncing to
the mirrors now.

-Sara

P.S. - You sort of can do directory listing, just not from the main
webservers: http://git.php.net/?p=web/php-distributions.git;a=tree

--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php
Christoph M. Becker
Re: [PHP-DEV] PHP 7.1.19 - where are the gpg signatures?
June 25, 2018 05:00PM
On 25.06.2018 at 16:48, Helmut K. C. Tessarek wrote:

> On 2018-06-25 16:34, Sara Golemon wrote:
>
>> Looks like Joe accidentally generated unarmored .sig files instead of
>> the usual .asc file.
>
> Ah, ok. .sig files are perfectly fine, too.
> I just didn't see the links, nor the .sig files, since no servers with
> php sources seem to allow directory listing.
>
> The .sig files were synced to the mirrors, so only the links on the web
> site are missing.
> (http://php.net/get/php-7.1.19.tar.xz.sig/from/a/mirror works)

http://php.net/get/php-7.1.19.tar.xz.asc/from/a/mirror appears to work
as well.

--
Christoph M. Becker

--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php
On Mon, Jun 25, 2018 at 9:53 AM, Christoph M. Becker <[email protected]> wrote:
> http://php.net/get/php-7.1.19.tar.xz.asc/from/a/mirror appears to work
> as well.
>
Yeah, because Joe and I already fixed it. :D
Snooze ya lose, brother.

-Sara

--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php
Sorry, only registered users may post in this forum.

Click here to login