Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:86727 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 63992 invoked from network); 17 Jun 2015 01:19:25 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 17 Jun 2015 01:19:25 -0000 Authentication-Results: pb1.pair.com smtp.mail=smalyshev@gmail.com; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=smalyshev@gmail.com; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.192.174 as permitted sender) X-PHP-List-Original-Sender: smalyshev@gmail.com X-Host-Fingerprint: 209.85.192.174 mail-pd0-f174.google.com Received: from [209.85.192.174] ([209.85.192.174:34840] helo=mail-pd0-f174.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 70/83-41412-C1BC0855 for ; Tue, 16 Jun 2015 21:19:24 -0400 Received: by pdbnf5 with SMTP id nf5so26217436pdb.2; Tue, 16 Jun 2015 18:19:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=xpIb/6Myic4L+Aem81aureC37XMRO+7tMaecjz7shGc=; b=VpeUbIZTJagPoagpPePQ0TxreWTQLDYisqP4qKEiMozDTbvhllQ2DieHYLg4qlTjjs Q7iB6YSNFCVCM+aIfr8p2TjgBT7nqgooX+VMawndCkzmqle0fcStyJajD6ckQ21PPJK5 EsNxo7wBJ2fi6RuUzxbt2YiPTJjxwksabL8sclsB+QI5IpDz53tvGCBuq3P8Jn3WmruR kpDcMwNPqheos93QcJxPGA7NsVB/Dw1aE2LncNYCwRbHzB39isyHRii9us6BaJa+k+be 5tqQgrslSiai55fvABl4VWIieZ0gZ4Ho/cK5tvbav463/Gr424eoFzfMRMvkytEgOIFP gO9Q== X-Received: by 10.70.134.231 with SMTP id pn7mr5643601pdb.97.1434503961788; Tue, 16 Jun 2015 18:19:21 -0700 (PDT) Received: from Stas-Air.local ([166.170.43.208]) by mx.google.com with ESMTPSA id af1sm2699700pad.34.2015.06.16.18.19.20 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 16 Jun 2015 18:19:20 -0700 (PDT) Message-ID: <5580CB16.9050600@gmail.com> Date: Tue, 16 Jun 2015 18:19:18 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: Ferenc Kovacs CC: Hannes Magnusson , Anatol Belski , Anatol Belski , PHP Development , PHP Webmaster ML References: <00c501d0a773$f84fee90$e8efcbb0$@belski.net> <557F54BB.4010600@gmail.com> In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Subject: Re: [PHP-DEV] PHP7 releases vs Windows Sources? From: smalyshev@gmail.com (Stanislav Malyshev) Hi! > about signing, recently I got a question that somebody couldn't verify > the tarball signature, because he was trying to verify the extracted > contents instead of the compressed file. > he was trying to do that, because that is how the kernel.org > releases are signed: > https://www.kernel.org/signature.html#using-gnupg-to-verify-kernel-signatures I far as I understood, this one verifies .tar - i.e. uncompressed, but not extracted. Am I wrong? If that's right, then it doesn't solve the issue with .zip. -- Stas Malyshev smalyshev@gmail.com