Project

General

Profile

signature asc

Added by Fil Lupin 5 months ago

Hi,
making some tests with i9300, I rebuilt the whole package following https://redmine.replicant.us/projects/replicant/wiki/GalaxyS3I9300Build and then read https://redmine.replicant.us/projects/replicant/wiki/GalaxyS3I9300Installation

However, I do not find anywhere .asc files into my phone. I looked into forum but did not find anything.
Could you remind me where I can find these .asc files?

Also I noticed that recovery-i9300.img is timed from january 1st 2009, so it does not seems to be built, I wondered if this is the normal result?

Thank you.


Replies (8)

RE: signature asc - Added by Kurtis Hanna 4 months ago

I could be wrong about this, but my assumption is that the .asc files are generated after the build process and are only for users to verify the integrity of the binaries that Replicant distributes. I don't think .asc files are generated or are necessary when users build the images themselves.

RE: signature asc - Added by Fil Lupin 4 months ago

Ok, it make sense.
So if I want to get those signatures on some other computer, do you know where I could get them? I do not find any .asc files on the file tree where I built Replicant.

Regards

RE: signature asc - Added by Joonas Kylmälä 4 months ago

https://git.replicant.us/replicant/release-scripts/tree/release.sh – you have to first create a gpg key in order to use that

RE: signature asc - Added by Joonas Kylmälä 4 months ago

I found also this page and it has the whole release process (including signing) layed out: https://redmine.replicant.us/projects/replicant/wiki/DeveloperGuide

RE: signature asc - Added by Kurtis Hanna 4 months ago

Joonas, you mentioned in the IRC that the signing script maybe needs some work with input validation. Perhaps that's the issue that Fil was running into. Should we open an issue about that? In the mean time, what is the workaround that you had? Should Fil do 'rm -r vendor/replicant-security' and then rerun the script and enter in this dummy data?

Country Name (2 letter code) [AU]:FI
State or Province Name (full name) [Some-State]:FI
Locality Name (eg, city) []:FI
Organization Name (eg, company) [Internet Widgits Pty Ltd]:FI
Organizational Unit Name (eg, section) []:FI
Common Name (e.g. your name) []:Test Test
Email Address []:test@test.fi

RE: signature asc - Added by Joonas Kylmälä 4 months ago

The .asc files are generated by the release.sh script I posted earlier on this thread. I understood that Fil has only taken the steps in https://redmine.replicant.us/projects/replicant/wiki/GalaxyS3I9300Build which doesn't include running that script.

About the input validation problem: yes, let's open a ticket if there is not one already.

RE: signature asc - Added by Kurtis Hanna 3 months ago

Correct me if I'm wrong, but I think that the input validation problem referenced in the last two comments is being addressed in this ticket: https://redmine.replicant.us/issues/1870

RE: signature asc - Added by Fil Lupin 3 months ago

Joonas Kylmälä wrote:

The .asc files are generated by the release.sh script I posted earlier on this thread. I understood that Fil has only taken the steps in https://redmine.replicant.us/projects/replicant/wiki/GalaxyS3I9300Build which doesn't include running that script.

About the input validation problem: yes, let's open a ticket if there is not one already.

You're right, I dollowed the steps in the https://redmine.replicant.us/projects/replicant/wiki/GalaxyS3I9300Build page

    (1-8/8)