[webkit-gtk] Release detached signatures

Carlos Alberto Lopez Perez clopez at igalia.com
Mon Nov 21 05:12:19 PST 2016

On 04/11/16 10:01, Jan Alexander Steffens wrote:
> Greetings,
> I would like to request proper detached signatures for webkitgtk's release
> tarballs. The current signed sha1 sums are unusual and really awkward to
> handle with our tooling.
> Attached two untested diffs for the webkit-release script, either of which
> should accomplish this; the simpler one replaces the current signatures
> with detached signatures and the other adds the detached signatures in
> addition to the existing ones.
> Thanks,
> Jan Steffens
> _______________________________________________
> webkit-gtk mailing list
> webkit-gtk at lists.webkit.org
> https://lists.webkit.org/mailman/listinfo/webkit-gtk


Thanks for the patch.

I applied the version webkit-release.replace-detach.diff [1] and did
some other changes [2].

So, from now on, the .asc file will be a detached GPG signature of the

And there will be also a .sums file with the hashes and .news file with
the short log of the release.



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 883 bytes
Desc: OpenPGP digital signature
URL: <https://lists.webkit.org/pipermail/webkit-gtk/attachments/20161121/12beb627/attachment.sig>

More information about the webkit-gtk mailing list