# PHP 7.1.19 - where are the gpg signatures?

- Thread: https://externals.io/message/102413
- Original archive: https://news-web.php.net/php.internals/102413
- Started by Helmut K. C. Tessarek on 2018-06-25T11:53:11+00:00
- Messages: 6
- Reply by email to internals@lists.php.net
- More for agents: search with https://externals.io/search.md?q={query} · JSON API at https://externals.io/api · documentation at https://externals.io/llms.txt

---

## #102413 — Helmut K. C. Tessarek — 2018-06-25T11:53:11+00:00

URL: https://externals.io/message/102413#102413

Hello,

The gpg signatures for the PHP 7.1.19 source tarballs are missing.

Cheers,
  K. C.

-- 
regards Helmut K. C. Tessarek              KeyID 0x172380A011EF4944
Key fingerprint = 8A55 70C1 BD85 D34E ADBC 386C 1723 80A0 11EF 4944

/*
   Thou shalt not follow the `NULL` pointer for chaos and madness
   await thee at its end.
*/

---

## #102420 — Sara Golemon — 2018-06-25T14:34:40+00:00

URL: https://externals.io/message/102413#102420 · In reply to: #102413

On Mon, Jun 25, 2018 at 6:53 AM, Helmut K. C. Tessarek
<tessarek@evermeet.cx> wrote:
> The gpg signatures for the PHP 7.1.19 source tarballs are missing.
>
Looks like Joe accidentally generated unarmored .sig files instead of
the usual .asc file.

Joe, could you re-issue the signatures as .asc files?  I could
probably convert these (it's mostly just base64 and a little CRC32
magic), but it'd be better done using the proper tooling.

Thanks for checking the signatures, Helmut, and double-thanks for
letting us know!

-Sara

---

## #102421 — Helmut K. C. Tessarek — 2018-06-25T14:48:04+00:00

URL: https://externals.io/message/102413#102421 · In reply to: #102420

> Looks like Joe accidentally generated unarmored .sig files instead of
> the usual .asc file.

Ah, ok. .sig files are perfectly fine, too.
I just didn't see the links, nor the .sig files, since no servers with
php sources seem to allow directory listing.

The .sig files were synced to the mirrors, so only the links on the web
site are missing.
(http://php.net/get/php-7.1.19.tar.xz.sig/from/a/mirror works)

Thanks for looking into this.

Cheers,
  K. C.

-- 
regards Helmut K. C. Tessarek              KeyID 0x172380A011EF4944
Key fingerprint = 8A55 70C1 BD85 D34E ADBC 386C 1723 80A0 11EF 4944

/*
   Thou shalt not follow the `NULL` pointer for chaos and madness
   await thee at its end.
*/

---

## #102422 — Sara Golemon — 2018-06-25T14:53:12+00:00

URL: https://externals.io/message/102413#102422 · In reply to: #102421

On Mon, Jun 25, 2018 at 9:48 AM, Helmut K. C. Tessarek
<tessarek@evermeet.cx> wrote:
> 
> Ah, ok. .sig files are perfectly fine, too.
> I just didn't see the links, nor the .sig files, since no servers with
> php sources seem to allow directory listing.
>
Yeah, we don't normally publish unarmored signatures 'cause the base64
versions tend to be more portable.  He literally just missed a switch
on a command line.
Anyway, he's pushed new ASC signatures and they should be syncing to
the mirrors now.

-Sara

P.S. - You sort of can do directory listing, just not from the main
webservers: http://git.php.net/?p=web/php-distributions.git;a=tree

---

## #102423 — Christoph M. Becker — 2018-06-25T14:53:46+00:00

URL: https://externals.io/message/102413#102423 · In reply to: #102421

> 
>
> > […]
> 
> Ah, ok. .sig files are perfectly fine, too.
> I just didn't see the links, nor the .sig files, since no servers with
> php sources seem to allow directory listing.
> 
> The .sig files were synced to the mirrors, so only the links on the web
> site are missing.
> (http://php.net/get/php-7.1.19.tar.xz.sig/from/a/mirror works)

<http://php.net/get/php-7.1.19.tar.xz.asc/from/a/mirror> appears to work
as well.

-- 
Christoph M. Becker

---

## #102424 — Sara Golemon — 2018-06-25T14:56:05+00:00

URL: https://externals.io/message/102413#102424 · In reply to: #102423

> <http://php.net/get/php-7.1.19.tar.xz.asc/from/a/mirror> appears to work
> as well.
>
Yeah, because Joe and I already fixed it. :D
Snooze ya lose, brother.

-Sara