From patchwork Mon Apr 1 23:33:56 2024
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
X-Patchwork-Submitter: Michael Niedermayer
X-Patchwork-Id: 47711
Delivered-To: ffmpegpatchwork2@gmail.com
Received: by 2002:a05:6a20:9f96:b0:1a3:b6bb:3029 with SMTP id
mm22csp1041504pzb;
Mon, 1 Apr 2024 16:34:11 -0700 (PDT)
X-Forwarded-Encrypted: i=2;
AJvYcCWGCB2U3uVUC1MKP5bfLj3mG4DVo9BKKjgd322YriDgC3n3jpNDweoGXFMPFFHx25fuD6JAepj+NSuQrvxSzrOIQtsz+c6CHbMykA==
X-Google-Smtp-Source:
AGHT+IFH3b8WhAbsS0of3PLwoe6OAIIjNUTcUveqGTlnpHIth/GMx5MaYyovY3KxyWUX9BYMTHsz
X-Received: by 2002:a05:6402:4316:b0:56d:cc5d:eaac with SMTP id
m22-20020a056402431600b0056dcc5deaacmr4346296edc.2.1712014451531;
Mon, 01 Apr 2024 16:34:11 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1712014451; cv=none;
d=google.com; s=arc-20160816;
b=h6+Lb8X4PsgFD2fmqh7GPWX01/UQnOT8tk8p4MMd4onKXj1hLBGYEZzXDYPfM5h0rH
3lHMu5Nb0jPLFMhv74X6kE2fQAZU8v5+ZcIyP8PjWUxISFW3EdBXec2Glhs50cRFKiUd
cTwvYzS0gtou1cdzBnaQdW4tmedk5WlNX1e+/beOcp17InBWDTyTb3Z8a4enkM8u+eMF
p83gqS+sZIluB9eePjlE9gZXg3dksQ7xGy3AaQ4a1OgviQ3w1uWvGotiYWf6z9SM1iTz
7SAHjBR/TZtGZ4v0UMIxM5paiMefNChFdCfN1rWGtYrS9qfmAfhBHqfdpXcwhb3tvy6K
Kz7w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com;
s=arc-20160816;
h=sender:errors-to:content-transfer-encoding:mime-version:reply-to
:list-subscribe:list-help:list-post:list-archive:list-unsubscribe
:list-id:precedence:subject:message-id:date:to:from:dkim-signature
:delivered-to;
bh=c0cks55jr2gHQtJwVAsvBK9nu9p23vn6DnIamey3zEc=;
fh=e5zN9xSzcxLA6bGo3lF+CqTbY/oLwzApV03EO/RBfgQ=;
b=rGZrk3EC7HqagZ0v+GeQY4aNng2bFIK1vZx23cY7vwXtmZP6QMo6X/Eo2dONxaCLb8
BLY3KQZZ1xjK39eESvekQcUpHHRmZ37MLSkZjX0Ly0+j3rf1H8+kbG9Hp00hBbHZ2Y+3
M1PIvxW5j1ol0EIeyG6+hetA05isyzO4L4FIw9UdjK9pnhPVkkCgzru3Uj0h3UTku+Uz
hlkMdE7g67G6V7ItBfasNktcZPtWxxvpp7tTh5ijRCOc5K/E2rFUIqy/h+jtquo9nWw2
g0swc3TsSRhDPdWzcxpA599dMB/J5OTqSBnZeYz05RpqBYna+Oojzv60R4jDxrYFJR4S
DZ0A==;
dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
dkim=neutral (body hash did not verify) header.i=@niedermayer.cc
header.s=gm1 header.b=Vh+Q2ENe;
spf=pass (google.com: domain of ffmpeg-devel-bounces@ffmpeg.org
designates 79.124.17.100 as permitted sender)
smtp.mailfrom=ffmpeg-devel-bounces@ffmpeg.org
Return-Path:
Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org. [79.124.17.100])
by mx.google.com with ESMTP id
s14-20020a50ab0e000000b00568a61c6d0asi5081677edc.37.2024.04.01.16.34.11;
Mon, 01 Apr 2024 16:34:11 -0700 (PDT)
Received-SPF: pass (google.com: domain of ffmpeg-devel-bounces@ffmpeg.org
designates 79.124.17.100 as permitted sender) client-ip=79.124.17.100;
Authentication-Results: mx.google.com;
dkim=neutral (body hash did not verify) header.i=@niedermayer.cc
header.s=gm1 header.b=Vh+Q2ENe;
spf=pass (google.com: domain of ffmpeg-devel-bounces@ffmpeg.org
designates 79.124.17.100 as permitted sender)
smtp.mailfrom=ffmpeg-devel-bounces@ffmpeg.org
Received: from [127.0.1.1] (localhost [127.0.0.1])
by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 15FAF68CC3B;
Tue, 2 Apr 2024 02:34:08 +0300 (EEST)
X-Original-To: ffmpeg-devel@ffmpeg.org
Delivered-To: ffmpeg-devel@ffmpeg.org
Received: from relay2-d.mail.gandi.net (relay2-d.mail.gandi.net
[217.70.183.194])
by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 9AA6968CC3B
for ; Tue, 2 Apr 2024 02:34:00 +0300 (EEST)
Received: by mail.gandi.net (Postfix) with ESMTPSA id 06EE440002
for ; Mon, 1 Apr 2024 23:33:59 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=niedermayer.cc;
s=gm1; t=1712014440;
h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
to:to:cc; bh=WEF0qH+S+pFoCXcOC+45i+k00F06OHsMEsMdwtOgGME=;
b=Vh+Q2ENeiQIiYNB/JTNPpz449XUa4sMejY0kT6MOACPJ7I7C4/isWfci02YqWMpOUHinX9
uWZnCp9BlSyg027w+7vCLYSc9etxMTZ0EbMsuPpDsXDTXiqcNUNBoM8C/z41qaaJhOBilx
DOO1/phZ3aDZHfiNUT4Aj5P3DbowbTuTDpP5++/X9EG2/YgDmHaSlYsagT4QCL6yinLgzP
hERyRj+Gsvzj8MvXmtJKyHQ3P4EcsTlSqiRozpYgmnBIISMC4tANfpGCrSzVFomH+glwWt
1PcPPTlS6cr2Of+sklmy+9o/mKSacV40Cs5WshsyE6gr3PlQSlrM/nHaQVZK/g==
From: Michael Niedermayer
To: FFmpeg development discussions and patches
Date: Tue, 2 Apr 2024 01:33:56 +0200
Message-Id: <20240401233356.9780-1-michael@niedermayer.cc>
X-Mailer: git-send-email 2.17.1
X-GND-Sasl: michael@niedermayer.cc
Subject: [FFmpeg-devel] [PATCH] web/download: List the expected differences
for releases and git and the expected signing key
X-BeenThere: ffmpeg-devel@ffmpeg.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: FFmpeg development discussions and patches
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
Reply-To: FFmpeg development discussions and patches
MIME-Version: 1.0
Errors-To: ffmpeg-devel-bounces@ffmpeg.org
Sender: "ffmpeg-devel"
X-TUID: LeAvDEkspyaz
This is kept terse, as few users are expected to check that but its important that we list what the expected differences and
signing key is, so any anomalies can be quickly detected.
Signed-off-by: Michael Niedermayer
---
src/download | 2 ++
1 file changed, 2 insertions(+)
diff --git a/src/download b/src/download
index 0e6fa7e..9866a3b 100644
--- a/src/download
+++ b/src/download
@@ -285,6 +285,8 @@ gpg: issuer "ffmpeg-devel@ffmpeg.org"
gpg: Good signature from "FFmpeg release signing key <ffmpeg-devel@ffmpeg.org>" [full]
+ Optionally, you can verify that git and tarball match, the only differences should be the absence of .git* files in the tarball and a VERSION file in the tarball containing the version.
+ The git tags should be signed with EDDSA key DD1EC9E8DE085C629B3E1846B18E8928B3948D64