-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Andre Bonhote wrote:
Hi
I might be paranoid AND stupid, but to me, it appears that the files on download.wikimedia.org are wrong.
There was an error in the original release (version numbers not updated), so it was re-issued:
http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-October/000079....
- result: e10f791ba9ecd02dd751a5676cc84405 mediawiki-1.13.2.tar.gz
Matches the updated release announce.
[ apache@zrhsrv06.ch.eu.colt ] [ bash ]: gpg --verify mediawiki-1.13.2.tar.gz.sig gpg: Signature made Thu 02 Oct 2008 05:48:30 PM METDST using DSA key ID E8A3FEC4 gpg: BAD signature from "Tim Starling tstarling@wikimedia.org"
Looks like Tim forgot to update the GPG signature files when he re-issued the release; we'll make sure they get re-done. The file checksums match, so we're good for now. :)
- -- brion