signature asc
Added by Fil Lupin about 6 years ago
Hi,
making some tests with i9300, I rebuilt the whole package following https://redmine.replicant.us/projects/replicant/wiki/GalaxyS3I9300Build and then read https://redmine.replicant.us/projects/replicant/wiki/GalaxyS3I9300Installation
However, I do not find anywhere .asc files into my phone. I looked into forum but did not find anything.
Could you remind me where I can find these .asc files?
Also I noticed that recovery-i9300.img is timed from january 1st 2009, so it does not seems to be built, I wondered if this is the normal result?
Thank you.
Replies (8)
RE: signature asc - Added by Kurtis Hanna about 6 years ago
I could be wrong about this, but my assumption is that the .asc files are generated after the build process and are only for users to verify the integrity of the binaries that Replicant distributes. I don't think .asc files are generated or are necessary when users build the images themselves.
RE: signature asc - Added by Fil Lupin about 6 years ago
Ok, it make sense.
So if I want to get those signatures on some other computer, do you know where I could get them? I do not find any .asc files on the file tree where I built Replicant.
Regards
RE: signature asc - Added by Joonas Kylmälä about 6 years ago
https://git.replicant.us/replicant/release-scripts/tree/release.sh – you have to first create a gpg key in order to use that
RE: signature asc - Added by Joonas Kylmälä about 6 years ago
I found also this page and it has the whole release process (including signing) layed out: https://redmine.replicant.us/projects/replicant/wiki/DeveloperGuide
RE: signature asc - Added by Kurtis Hanna about 6 years ago
Joonas, you mentioned in the IRC that the signing script maybe needs some work with input validation. Perhaps that's the issue that Fil was running into. Should we open an issue about that? In the mean time, what is the workaround that you had? Should Fil do 'rm -r vendor/replicant-security' and then rerun the script and enter in this dummy data?
Country Name (2 letter code) [AU]:FI
State or Province Name (full name) [Some-State]:FI
Locality Name (eg, city) []:FI
Organization Name (eg, company) [Internet Widgits Pty Ltd]:FI
Organizational Unit Name (eg, section) []:FI
Common Name (e.g. your name) []:Test Test
Email Address []:test@test.fi
RE: signature asc - Added by Joonas Kylmälä about 6 years ago
The .asc files are generated by the release.sh script I posted earlier on this thread. I understood that Fil has only taken the steps in https://redmine.replicant.us/projects/replicant/wiki/GalaxyS3I9300Build which doesn't include running that script.
About the input validation problem: yes, let's open a ticket if there is not one already.
RE: signature asc - Added by Kurtis Hanna about 6 years ago
Correct me if I'm wrong, but I think that the input validation problem referenced in the last two comments is being addressed in this ticket: https://redmine.replicant.us/issues/1870
RE: signature asc - Added by Fil Lupin about 6 years ago
Joonas Kylmälä wrote:
The .asc files are generated by the release.sh script I posted earlier on this thread. I understood that Fil has only taken the steps in https://redmine.replicant.us/projects/replicant/wiki/GalaxyS3I9300Build which doesn't include running that script.
About the input validation problem: yes, let's open a ticket if there is not one already.
You're right, I followed the steps in the https://redmine.replicant.us/projects/replicant/wiki/GalaxyS3I9300Build page