[webkit-gtk] Release detached signatures
Carlos Alberto Lopez Perez
clopez at igalia.com
Mon Nov 21 05:12:19 PST 2016
On 04/11/16 10:01, Jan Alexander Steffens wrote:
> Greetings,
>
> I would like to request proper detached signatures for webkitgtk's release
> tarballs. The current signed sha1 sums are unusual and really awkward to
> handle with our tooling.
>
> Attached two untested diffs for the webkit-release script, either of which
> should accomplish this; the simpler one replaces the current signatures
> with detached signatures and the other adds the detached signatures in
> addition to the existing ones.
>
> Thanks,
> Jan Steffens
>
>
>
> _______________________________________________
> webkit-gtk mailing list
> webkit-gtk at lists.webkit.org
> https://lists.webkit.org/mailman/listinfo/webkit-gtk
>
Hi,
Thanks for the patch.
I applied the version webkit-release.replace-detach.diff [1] and did
some other changes [2].
So, from now on, the .asc file will be a detached GPG signature of the
tarball.
And there will be also a .sums file with the hashes and .news file with
the short log of the release.
Regards.
--------
[1]
https://github.com/WebKitGTK/webkitgtk.org/commit/4a6fdeef53c7a2e71ccee2bd567b92039de8ff1d
[2]
https://github.com/WebKitGTK/webkitgtk.org/commit/dc24f1bf28312e32cf33f820cb6c466b353a3f0e
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 883 bytes
Desc: OpenPGP digital signature
URL: <https://lists.webkit.org/pipermail/webkit-gtk/attachments/20161121/12beb627/attachment.sig>
More information about the webkit-gtk
mailing list