[cairo] Patch to use sha1 checksums and sign them

Carl Worth cworth at cworth.org
Fri Aug 12 23:50:16 PDT 2005


On Sat, 13 Aug 2005 02:02:46 -0400 (EDT), Behdad Esfahbod wrote:
> The attached patch changes Makefile.am to use sha1sum instead of
> md5sum, and to use gpg to sign the checksum, such that releases
> can be verified to be (strongly) authentic without prior
> knowledge of the checksum.

Looks good to me.

I added the tag command to release-publish as well. I didn't test it
at all, but hopefully I'll have a chance to test all of this this
weekend with a 0.9.1 release.

-Carl
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.freedesktop.org/archives/cairo/attachments/20050812/2e7db850/attachment.pgp


More information about the cairo mailing list