Re: [Gnu-arch-users] tla--devo--1.2 has preliminary gpg stuff

[James Blackwell]

In lists.arch.users, johannes wrote:
>
>
> Which reminds me -- is there functionality inside tla to check
> signatures when pulling patches from somewhere (star-merge, update,
> replay, etc)

Tom and Robert have been working very hard on the instrastructure for
the last two or three weeks. Their work has progressed to the point that
one can sign an archive one is responsible for, but not to the point
that signatures are copied during mirrors or signatures being checked
during replays/updates or merges. 

Its just a case of being patient. Tom and Robert are aware of how useful
these things are, but they have to take things a step at a time. 

Right now, I'm patiently waiting for a --copy-sigs option to
archive-mirror, so that I can have a page at mirrors.sourcecontrol.net
that lists which archives have missing md5 sums, bad md5 sums and bad
signatures.

While you're waiting, you can check your own archives with gpgcheck, which
you can get with 'tla grab http://sourcecontrol.net/grabs/tlacontrib'.

Once there is a --copy-sigs option to archive-mirror, you'll be able to
check those with gpgcheck too. 





>
> johannes
> --=20
> http://www.sipsolutions.de/
> GnuPG key: http://www.sipsolutions.de/keys/JohannesBerg.asc
>   Key-ID: 9AB78CA5 Johannes Berg <address@hidden>
>   Fingerprint =3D AD02 0176 4E29 C137 1DF6 08D2 FC44 CF86 9AB7 8CA5
>
> --=-FwJJSxJucGWzCysZQStC
> Content-Type: application/pgp-signature; name=signature.asc
> Content-Description: This is a digitally signed message part
>
> -----BEGIN PGP SIGNATURE-----
> Comment: Johannes Berg (SIP Solutions)
>
> iQIVAwUAP+xvP6Vg1VMiehFYAQKU/g/+Pefl3YsK5KD8fU43ZzQYAsp7PL0/BUQg
> 4RZCBeYDLMvzM5mi3H8IM0cgtPQY+NpHhtfO2i1MewEajxzO7ZfPePlhotEtSxSs
> FV+Tv5ZcswRNG7yRTJwOHRbsyPIpB6osDKZL/BIhamsr+33omclL3KlA8yVjd3uM
> bL37xImrIKN/Ke2nhgdOxPZBM+oNgOcbjvvBqDlHwXPCkfL/DURh3mFOXRe6umOt
> pguObSw6rDXsa9YlSV+a7I5xuEYQAkx5IyP+zFVJBuEPqycGYuhLH8kEgU1jMQHJ
> f4qH5FLfg5VuNWW935KW+A3etLj6MwiZgJOFDnKaxJq2Si1Z34VpYMs5m+lYQDLG
> fh42zAjisMnq2yjOHF2ZV6Jex61naVE+MjLkLmCRnIAr54TK+I17YQQyLJg7MdmL
> bo8+rlq7mI2Q43sMMLu5t7EkVitfuucuyxtfN9La/YKmhgenadOSZxs0a7dGoT6m
> 0PZW6wfD1ck+jZZfV3TMzLW6evBh0cZLVhVu4YN0QQPWzp5oE4iIYU4JOlor4OqX
> IDGioNGPpo5kZ+jclqsx7E4ybhOvqH5XOOt1xHdO+ak/RkFuKMvP1s/a5aP4uoUi
> Wyo2gbImLa73oUD25i1VFwqCWDny4xPAFvv1FNvPLqGLqdEqnFuPK8mNVTG4lhOd
> ZwfFXJVoh84=
> =qlwH
> -----END PGP SIGNATURE-----
>
> --=-FwJJSxJucGWzCysZQStC--
>
>
>
>
> --===============1706137645==
> Content-Type: text/plain; charset="us-ascii"
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> Content-Disposition: inline
>
> _______________________________________________
> Gnu-arch-users mailing list
> address@hidden
> http://mail.gnu.org/mailman/listinfo/gnu-arch-users
>
> GNU arch home page:
> http://savannah.gnu.org/projects/gnu-arch/
> --===============1706137645==--
>
>
>


-- 
James Blackwell        Using I.T. to bring more                570-407-0488
Owner, Inframix        business to your business        http://inframix.com

   GnuPG (ID 06357400) AAE4 8C76 58DA 5902 761D  247A 8A55 DA73 0635 7400