From patchwork Mon Apr 1 23:33:56 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Michael Niedermayer X-Patchwork-Id: 47711 Delivered-To: ffmpegpatchwork2@gmail.com Received: by 2002:a05:6a20:9f96:b0:1a3:b6bb:3029 with SMTP id mm22csp1041504pzb; Mon, 1 Apr 2024 16:34:11 -0700 (PDT) X-Forwarded-Encrypted: i=2; AJvYcCWGCB2U3uVUC1MKP5bfLj3mG4DVo9BKKjgd322YriDgC3n3jpNDweoGXFMPFFHx25fuD6JAepj+NSuQrvxSzrOIQtsz+c6CHbMykA== X-Google-Smtp-Source: AGHT+IFH3b8WhAbsS0of3PLwoe6OAIIjNUTcUveqGTlnpHIth/GMx5MaYyovY3KxyWUX9BYMTHsz X-Received: by 2002:a05:6402:4316:b0:56d:cc5d:eaac with SMTP id m22-20020a056402431600b0056dcc5deaacmr4346296edc.2.1712014451531; Mon, 01 Apr 2024 16:34:11 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1712014451; cv=none; d=google.com; s=arc-20160816; b=h6+Lb8X4PsgFD2fmqh7GPWX01/UQnOT8tk8p4MMd4onKXj1hLBGYEZzXDYPfM5h0rH 3lHMu5Nb0jPLFMhv74X6kE2fQAZU8v5+ZcIyP8PjWUxISFW3EdBXec2Glhs50cRFKiUd cTwvYzS0gtou1cdzBnaQdW4tmedk5WlNX1e+/beOcp17InBWDTyTb3Z8a4enkM8u+eMF p83gqS+sZIluB9eePjlE9gZXg3dksQ7xGy3AaQ4a1OgviQ3w1uWvGotiYWf6z9SM1iTz 7SAHjBR/TZtGZ4v0UMIxM5paiMefNChFdCfN1rWGtYrS9qfmAfhBHqfdpXcwhb3tvy6K Kz7w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=sender:errors-to:content-transfer-encoding:mime-version:reply-to :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:message-id:date:to:from:dkim-signature :delivered-to; bh=c0cks55jr2gHQtJwVAsvBK9nu9p23vn6DnIamey3zEc=; fh=e5zN9xSzcxLA6bGo3lF+CqTbY/oLwzApV03EO/RBfgQ=; b=rGZrk3EC7HqagZ0v+GeQY4aNng2bFIK1vZx23cY7vwXtmZP6QMo6X/Eo2dONxaCLb8 BLY3KQZZ1xjK39eESvekQcUpHHRmZ37MLSkZjX0Ly0+j3rf1H8+kbG9Hp00hBbHZ2Y+3 M1PIvxW5j1ol0EIeyG6+hetA05isyzO4L4FIw9UdjK9pnhPVkkCgzru3Uj0h3UTku+Uz hlkMdE7g67G6V7ItBfasNktcZPtWxxvpp7tTh5ijRCOc5K/E2rFUIqy/h+jtquo9nWw2 g0swc3TsSRhDPdWzcxpA599dMB/J5OTqSBnZeYz05RpqBYna+Oojzv60R4jDxrYFJR4S DZ0A==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@niedermayer.cc header.s=gm1 header.b=Vh+Q2ENe; spf=pass (google.com: domain of ffmpeg-devel-bounces@ffmpeg.org designates 79.124.17.100 as permitted sender) smtp.mailfrom=ffmpeg-devel-bounces@ffmpeg.org Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org. [79.124.17.100]) by mx.google.com with ESMTP id s14-20020a50ab0e000000b00568a61c6d0asi5081677edc.37.2024.04.01.16.34.11; Mon, 01 Apr 2024 16:34:11 -0700 (PDT) Received-SPF: pass (google.com: domain of ffmpeg-devel-bounces@ffmpeg.org designates 79.124.17.100 as permitted sender) client-ip=79.124.17.100; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@niedermayer.cc header.s=gm1 header.b=Vh+Q2ENe; spf=pass (google.com: domain of ffmpeg-devel-bounces@ffmpeg.org designates 79.124.17.100 as permitted sender) smtp.mailfrom=ffmpeg-devel-bounces@ffmpeg.org Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 15FAF68CC3B; Tue, 2 Apr 2024 02:34:08 +0300 (EEST) X-Original-To: ffmpeg-devel@ffmpeg.org Delivered-To: ffmpeg-devel@ffmpeg.org Received: from relay2-d.mail.gandi.net (relay2-d.mail.gandi.net [217.70.183.194]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 9AA6968CC3B for ; Tue, 2 Apr 2024 02:34:00 +0300 (EEST) Received: by mail.gandi.net (Postfix) with ESMTPSA id 06EE440002 for ; Mon, 1 Apr 2024 23:33:59 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=niedermayer.cc; s=gm1; t=1712014440; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=WEF0qH+S+pFoCXcOC+45i+k00F06OHsMEsMdwtOgGME=; b=Vh+Q2ENeiQIiYNB/JTNPpz449XUa4sMejY0kT6MOACPJ7I7C4/isWfci02YqWMpOUHinX9 uWZnCp9BlSyg027w+7vCLYSc9etxMTZ0EbMsuPpDsXDTXiqcNUNBoM8C/z41qaaJhOBilx DOO1/phZ3aDZHfiNUT4Aj5P3DbowbTuTDpP5++/X9EG2/YgDmHaSlYsagT4QCL6yinLgzP hERyRj+Gsvzj8MvXmtJKyHQ3P4EcsTlSqiRozpYgmnBIISMC4tANfpGCrSzVFomH+glwWt 1PcPPTlS6cr2Of+sklmy+9o/mKSacV40Cs5WshsyE6gr3PlQSlrM/nHaQVZK/g== From: Michael Niedermayer To: FFmpeg development discussions and patches Date: Tue, 2 Apr 2024 01:33:56 +0200 Message-Id: <20240401233356.9780-1-michael@niedermayer.cc> X-Mailer: git-send-email 2.17.1 X-GND-Sasl: michael@niedermayer.cc Subject: [FFmpeg-devel] [PATCH] web/download: List the expected differences for releases and git and the expected signing key X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches MIME-Version: 1.0 Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" X-TUID: LeAvDEkspyaz This is kept terse, as few users are expected to check that but its important that we list what the expected differences and signing key is, so any anomalies can be quickly detected. Signed-off-by: Michael Niedermayer --- src/download | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/download b/src/download index 0e6fa7e..9866a3b 100644 --- a/src/download +++ b/src/download @@ -285,6 +285,8 @@ gpg: issuer "ffmpeg-devel@ffmpeg.org" gpg: Good signature from "FFmpeg release signing key <ffmpeg-devel@ffmpeg.org>" [full] + Optionally, you can verify that git and tarball match, the only differences should be the absence of .git* files in the tarball and a VERSION file in the tarball containing the version. + The git tags should be signed with EDDSA key DD1EC9E8DE085C629B3E1846B18E8928B3948D64