[cairo] Patch to use sha1 checksums and sign them

Behdad Esfahbod behdad at cs.toronto.edu
Fri Aug 12 23:53:05 PDT 2005

On Sat, 13 Aug 2005, Carl Worth wrote:

> On Sat, 13 Aug 2005 02:02:46 -0400 (EDT), Behdad Esfahbod wrote:
> > The attached patch changes Makefile.am to use sha1sum instead of
> > md5sum, and to use gpg to sign the checksum, such that releases
> > can be verified to be (strongly) authentic without prior
> > knowledge of the checksum.
> Looks good to me.
> I added the tag command to release-publish as well. I didn't test it
> at all, but hopefully I'll have a chance to test all of this this
> weekend with a 0.9.1 release.

Checking that 0.9.1 has an even micro component...Ouch.
The version micro component '1' is not an even number.
The version in configure.in must be incremented before a new
make: *** [release-publish] Error 1

> -Carl


More information about the cairo mailing list