Bug#819664: .sign suffix?
Stéphane Blondon <[email protected]>
| Newsgroups | gmane.linux.debian.devel.www |
|---|---|
| Message-ID | <d509a3fd-5ffd-d3a7-4c95-948cc6cf35df__24761.8912523196$1474874125$gmane$org@gmail.com> |
Hello,
Le 25/09/2016 à 17:57, Eduard Bloch a écrit :
> I am slightly wondering about this new filename ending .sign. IMHO the
> usual pattern for such files was .gpg before (for example: Release.gpg).
>
> This .sign looks weird, it does not tell you which format the data
> inside might have.
Can you provide an example where the extension has changed?
There are signatures ending with .sign for each cd, dvd, etc. images but
the suffix seems to be always .sign since release 3.1:
http://cdimage.debian.org/cdimage/archive/3.1_r0/i386/iso-cd/
it's like today:
http://cdimage.debian.org/debian-cd/8.6.0/amd64/iso-cd/
The scheme is
{MD5, SHAx}SUMS : the checksum according to each algorithm
{MD5, SHAx}SUMS.sign : the checksum signed by a Debian CD signing key
Do you talk about other signatures?
--
Stéphane
signature.asc
(application/pgp-signature, 819 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJX6Mn1AAoJEKK5G8bNTr3cW7EQAJ/36M/O6E/cbA9v7qMTpq1l t5huKh1C6SRLOwwSzjAM9VBt4YWsJ/pLY+DyMRCmpLQyRngHLk8+RHFmo/ztcl6/ GPNRaELj/Todlq3sYbjZJnFehGUOHlOvldcNOoycbU+nt/he8w1uoyq7H8N8DOG6 I+fdAqDw0crOXb9TaYEH82MsfLAgbXzHSujGCKcnkXGqsXyHbigazw7KINky/SQ8 BVUnREH18z8MOFycXub/2e1XVcsKVbnqX8MHVqiUGk6YmDL0pMIEWFp/XWQA+mTv SSROSe/9sdZ/jM3Yr9D8iM3PJWKNNpii33dcNkT344oJNpGa9PmfpSd4BpJKe6F7 9WpTzPTgjPtvS19G6GJJWL7RItofaXRJtv/POS8Ti6UeWMsjbIfDEiizrnrfwf6F 80rrTH0IKBn8v4XfuOsvJajj8/bUrKaFMaChVdmlznsuXe5idyStljaPacftcYja oySzdGLkQ4aAQhfVYbwl+7bgKFvqz8oD+nogpXJX6NZxrAhEFdsipAQw5db7gbbv ryCsVHYalzmh3FgnyczrTX3Rdugq38Feba1rccgU0/b+R7wGdXLOY0gj1Oq58kxK bLmJ7BwEXD1xGPg9nwj62e2wdtN7U05sDE0Fc5S5AUot4RNNPgjm1US4PqWW03GN mHBc3sqR6M4n78/FD4QD =4rC6 -----END PGP SIGNATURE-----