Everything

php

PHP 7.1.19 - where are the gpg signatures?

php.internals

Helmut Tessarek

8 years ago

Hello,

The gpg signatures for the PHP 7.1.19 source tarballs are missing.

Cheers,
K. C.

--
regards Helmut K. C. Tessarek              KeyID 0x172380A011EF4944
Key fingerprint = 8A55 70C1 BD85 D34E ADBC 386C 1723 80A0 11EF 4944

/*
Thou shalt not follow the NULL pointer for chaos and madness
await thee at its end.
*/

Sara Golemon

8 years ago

On Mon, Jun 25, 2018 at 6:53 AM, Helmut K. C. Tessarek
<tessarek@evermeet.cx> wrote:

> The gpg signatures for the PHP 7.1.19 source tarballs are missing.
>

Looks like Joe accidentally generated unarmored .sig files instead of
the usual .asc file.

Joe, could you re-issue the signatures as .asc files?  I could
probably convert these (it's mostly just base64 and a little CRC32
magic), but it'd be better done using the proper tooling.

Thanks for checking the signatures, Helmut, and double-thanks for
letting us know!

-Sara

Helmut Tessarek

8 years ago

On 2018-06-25 16:34, Sara Golemon wrote:

> Looks like Joe accidentally generated unarmored .sig files instead of
> the usual .asc file.

Ah, ok. .sig files are perfectly fine, too.
I just didn't see the links, nor the .sig files, since no servers with
php sources seem to allow directory listing.

The .sig files were synced to the mirrors, so only the links on the web
site are missing.
(http://php.net/get/php-7.1.19.tar.xz.sig/from/a/mirror works)

Thanks for looking into this.

Cheers,
K. C.

--
regards Helmut K. C. Tessarek              KeyID 0x172380A011EF4944
Key fingerprint = 8A55 70C1 BD85 D34E ADBC 386C 1723 80A0 11EF 4944

/*
Thou shalt not follow the NULL pointer for chaos and madness
await thee at its end.
*/

Sara Golemon

8 years ago

On Mon, Jun 25, 2018 at 9:48 AM, Helmut K. C. Tessarek
<tessarek@evermeet.cx> wrote:

> On 2018-06-25 16:34, Sara Golemon wrote:
> Ah, ok. .sig files are perfectly fine, too.
> I just didn't see the links, nor the .sig files, since no servers with
> php sources seem to allow directory listing.
>

Yeah, we don't normally publish unarmored signatures 'cause the base64
versions tend to be more portable.  He literally just missed a switch
on a command line.
Anyway, he's pushed new ASC signatures and they should be syncing to
the mirrors now.

-Sara

P.S. - You sort of can do directory listing, just not from the main
webservers: http://git.php.net/?p=web/php-distributions.git;a=tree

Christoph Becker

8 years ago

On 25.06.2018 at 16:48, Helmut K. C. Tessarek wrote:

> On 2018-06-25 16:34, Sara Golemon wrote:
>
>> Looks like Joe accidentally generated unarmored .sig files instead of
>> the usual .asc file.
>
> Ah, ok. .sig files are perfectly fine, too.
> I just didn't see the links, nor the .sig files, since no servers with
> php sources seem to allow directory listing.
>
> The .sig files were synced to the mirrors, so only the links on the web
> site are missing.
> (http://php.net/get/php-7.1.19.tar.xz.sig/from/a/mirror works)

<http://php.net/get/php-7.1.19.tar.xz.asc/from/a/mirror> appears to work
as well.

--
Christoph M. Becker

Sara Golemon

8 years ago

On Mon, Jun 25, 2018 at 9:53 AM, Christoph M. Becker <cmbecker69@gmx.de> wrote:

> <http://php.net/get/php-7.1.19.tar.xz.asc/from/a/mirror> appears to work
> as well.
>

Yeah, because Joe and I already fixed it. :D
Snooze ya lose, brother.

-Sara