From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Andreas Schwab Newsgroups: gmane.emacs.bugs Subject: Re: release checksum issue related to xdelta file, how to check .sig files (was: Emacs 22.2 released) Date: Mon, 31 Mar 2008 22:12:44 +0200 Message-ID: References: NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable X-Trace: ger.gmane.org 1206994408 28672 80.91.229.12 (31 Mar 2008 20:13:28 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 31 Mar 2008 20:13:28 +0000 (UTC) Cc: bug-gnu-emacs@gnu.org, Chong Yidong To: Joe Wells Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Mon Mar 31 22:13:56 2008 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1JgQNs-0005Ri-Gx for geb-bug-gnu-emacs@m.gmane.org; Mon, 31 Mar 2008 22:13:36 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1JgQNG-0006at-7g for geb-bug-gnu-emacs@m.gmane.org; Mon, 31 Mar 2008 16:12:58 -0400 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1JgQNB-0006ab-20 for bug-gnu-emacs@gnu.org; Mon, 31 Mar 2008 16:12:53 -0400 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1JgQN7-0006aD-Kt for bug-gnu-emacs@gnu.org; Mon, 31 Mar 2008 16:12:51 -0400 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1JgQN7-0006aA-Fb for bug-gnu-emacs@gnu.org; Mon, 31 Mar 2008 16:12:49 -0400 Original-Received: from ns.suse.de ([195.135.220.2] helo=mx1.suse.de) by monty-python.gnu.org with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.60) (envelope-from ) id 1JgQN7-00064G-4E for bug-gnu-emacs@gnu.org; Mon, 31 Mar 2008 16:12:49 -0400 Original-Received: from Relay1.suse.de (relay-ext.suse.de [195.135.221.8]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.suse.de (Postfix) with ESMTP id 5485F3F6E8; Mon, 31 Mar 2008 22:12:45 +0200 (CEST) X-Yow: I'm definitely not in Omaha! In-Reply-To: (Joe Wells's message of "31 Mar 2008 11\:09\:22 -0400") User-Agent: Gnus/5.110006 (No Gnus v0.6) Emacs/22.1 (gnu/linux) X-detected-kernel: by monty-python.gnu.org: Linux 2.4-2.6 X-BeenThere: bug-gnu-emacs@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:17773 Archived-At: Joe Wells writes: >>>>>> "Chong" =3D=3D Chong Yidong writes: > > Chong> GNU Emacs 22.2 has been released, and is now available at > Chong> ftp.gnu.org/gnu/emacs/ and the GNU FTP mirrors (see > Chong> http://www.gnu.org/order/ftp.html). > > Chong> The MD5 check-sum is the following: > > Chong> d6ee586b8752351334ebf072904c4d51 emacs-22.2.tar.gz > > When using the emacs-22.1-22.2.xdelta patch to build emacs-22.2.tar.gz > from emacs-22.1.tar.gz, I get a *different* emacs-22.2.tar.gz file, > because it has been compressed differently. (The contents are the same= , > as revealed by "gunzip -c emacs-22.2.tar.gz | md5sum".) This causes tw= o > problems: > > 1. The above checksum can not be used to verify the generated file. The xdelta contains the checksum of the unpressed contents, which is used for verification. You can verify the authenticity of the xdelta with the provided signature. > 2. The emacs-22.2.tar.gz generated by xdelta will presumably not be usa= ble > as the basis for the next release. The xdelta is based on the uncompressed contents. The next xdelta will also be based on the uncompressed contents which you have verified as identical to the distributed file. > I'm not sure what the solution to this is. It is important that the > .tar.gz file generated by xdelta is the same as the .tar.gz file > distributed by FTP, or there will be problems. I see no problem here. Andreas. --=20 Andreas Schwab, SuSE Labs, schwab@suse.de SuSE Linux Products GmbH, Maxfeldstra=DFe 5, 90409 N=FCrnberg, Germany PGP key fingerprint =3D 58CA 54C7 6D53 942B 1756 01D3 44D5 214B 8276 4ED= 5 "And now for something completely different."