After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 145128 - GPG-signed download archives
GPG-signed download archives
Status: RESOLVED DUPLICATE of bug 645565
Product: Release Engineering
Classification: Infrastructure
Component: General
unspecified
Other All
: Normal enhancement
: ---
Assigned To: Release Engineering People
Release Engineering People
Depends on:
Blocks:
 
 
Reported: 2004-06-29 09:33 UTC by Rene van Bevern
Modified: 2011-11-16 18:18 UTC
See Also:
GNOME target: ---
GNOME version: ---


Description Rene van Bevern 2004-06-29 09:33:38 UTC 
At the moment, only md5 sums are provided for the download archives on the GNOME
ftp server. This does not suffice, because if someone can change one of the
archives he also can update the md5 sums. Detached GPG signatures should be
provided to ensure that the tar.gz archives are really packed by the GNOME project.
Comment 1 CK 2008-07-05 08:46:42 UTC 
+1

Please enable this feature.
Comment 2 Olav Vitters 2011-11-16 16:52:32 UTC 

*** This bug has been marked as a duplicate of bug 645565 ***
Comment 3 Nick Bowler 2011-11-16 18:18:31 UTC 
When you close a bug that's still relevant as a duplicate of another, please move the CC list so that the rest of us do not get cut out of the loop.  Thanks.