fluo-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From ctubbsii <...@git.apache.org>
Subject [GitHub] incubator-fluo issue #790: Add verification code to RC email
Date Fri, 21 Oct 2016 21:28:54 GMT
Github user ctubbsii commented on the issue:

    Maybe simpler, and leaves some MD5SUM, SHA1SUM files around to manually check later:
    function checkFile {
      local file; file=$1
      echo '='
      echo "$file"
      gpg2 --verify "$file".asc "$file"
      echo "$(cat "$file".md5) *$file" >> MD5SUM
      echo "$(cat "$file".sha1) *$file" >> SHA1SUM
    export -f checkFile
    #find . -type f -name '*.asc' -exec bash -c 'checkFile "$(dirname "$0")/$(basename "$0"
.asc)"' {} \;
    find . -type f -regex '.*\.\(pom\|jar\|gz\)' -exec bash -c 'checkFile "$0"' {} \;
    md5sum --quiet -c MD5SUM
    sha1sum --quiet -c SHA1SUM
    The commented out find command is a little more comprehensive... it'll check all files
with a detached gpg signature. The original one only checks for `pom`, `jar`, and `gz` files,
and that may not catch everything.

If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastructure@apache.org or file a JIRA ticket
with INFRA.

View raw message