Newsgroups: php.internals,php.webmaster Path: news.php.net Xref: news.php.net php.internals:86729 php.webmaster:21389 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 86767 invoked from network); 17 Jun 2015 09:21:29 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 17 Jun 2015 09:21:29 -0000 Authentication-Results: pb1.pair.com header.from=tyra3l@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=tyra3l@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.215.42 as permitted sender) X-PHP-List-Original-Sender: tyra3l@gmail.com X-Host-Fingerprint: 209.85.215.42 mail-la0-f42.google.com Received: from [209.85.215.42] ([209.85.215.42:34002] helo=mail-la0-f42.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id C0/C5-41412-51C31855 for ; Wed, 17 Jun 2015 05:21:25 -0400 Received: by labbc20 with SMTP id bc20so28439001lab.1; Wed, 17 Jun 2015 02:21:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=42aQ3qjuMF/q7G/Zu6jt7vZ9HtoofIhAb3DlgxeuHTM=; b=Bct34v7qbUHseug3kPaRSameoStJjKiW+q6x7Y1UVx0cVhfAFvMLY4lBg7XdhvtgJB 9jJgI9e+afg7t4z5r38pDg24zNTFqXEvKwYEzvZFVBchmQ69+frUTgaH8UJPF/sCVMjd PVUuwXS6S6jujGTWQKWgn2M/dYriUdRcvyRNcd2k8SgoGFwSARBjlVYG+9xjqQq4DINw plkRaR0hD0WjnIsgbivEEMlsg1jA1moeWJPnj9Log7va0sEXxOMQlsUf/hFIPwUYE1oe iKAj8IG25V7PLxWWu95X+m0+5cVv6se6BjhEHX3aE2cnIMBxPwTBdQO0CBEUZid28e+F yNsQ== MIME-Version: 1.0 X-Received: by 10.112.161.40 with SMTP id xp8mr6661647lbb.71.1434532881959; Wed, 17 Jun 2015 02:21:21 -0700 (PDT) Received: by 10.152.43.105 with HTTP; Wed, 17 Jun 2015 02:21:21 -0700 (PDT) In-Reply-To: <5580CB16.9050600@gmail.com> References: <00c501d0a773$f84fee90$e8efcbb0$@belski.net> <557F54BB.4010600@gmail.com> <5580CB16.9050600@gmail.com> Date: Wed, 17 Jun 2015 11:21:21 +0200 Message-ID: To: Stanislav Malyshev Cc: Hannes Magnusson , Anatol Belski , Anatol Belski , PHP Development , PHP Webmaster ML Content-Type: multipart/alternative; boundary=001a11c25f52d911100518b33649 Subject: Re: [PHP-DEV] PHP7 releases vs Windows Sources? From: tyra3l@gmail.com (Ferenc Kovacs) --001a11c25f52d911100518b33649 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Wed, Jun 17, 2015 at 3:19 AM, Stanislav Malyshev wrote: > Hi! > > > about signing, recently I got a question that somebody couldn't verify > > the tarball signature, because he was trying to verify the extracted > > contents instead of the compressed file. > > he was trying to do that, because that is how the kernel.org > > releases are signed: > > > https://www.kernel.org/signature.html#using-gnupg-to-verify-kernel-signat= ures > > I far as I understood, this one verifies .tar - i.e. uncompressed, but > not extracted. Am I wrong? If that's right, then it doesn't solve the > issue with .zip. > > > -- > Stas Malyshev > smalyshev@gmail.com > yep, that doesn't solves the separate signing of zips, buth one signature would be enough for all tar.* files --=20 Ferenc Kov=C3=A1cs @Tyr43l - http://tyrael.hu --001a11c25f52d911100518b33649--