[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: [PATCH] Document tarball signing

From: mark benedetto king <mbk_at_lowlatency.com>
Date: 2005-11-23 00:45:25 CET

On Tue, Nov 22, 2005 at 04:12:52PM -0600, kfogel@collab.net wrote:
> mark benedetto king <mbk@lowlatency.com> writes:
> > Should we independently export and verify that the release tarball
> > is a true copy of the tag before signing?
>
> I actually diff it against the release branch and make sure (with
> Emacs' help, esp M-x delete-non-matching-lines) that all differences
> are expected and innocuous. I suppose I could diff against the tag
> too.

Right, a branch WC is more likely to be handy, and your process serves
the same purpose. Perhaps we should make this an explicit step,
though, so that signers understand what their signature should entail.

--ben

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Wed Nov 23 00:43:23 2005

This is an archived mail posted to the Subversion Dev mailing list.