-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Andre Bonhote wrote:
Hi
I might be paranoid AND stupid, but to me, it appears that the files on
download.wikimedia.org are wrong.
There was an error in the original release (version numbers not
updated), so it was re-issued:
http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-October/000079…
- result: e10f791ba9ecd02dd751a5676cc84405
mediawiki-1.13.2.tar.gz
Matches the updated release announce.
[ apache(a)zrhsrv06.ch.eu.colt ] [ bash ]: gpg --verify
mediawiki-1.13.2.tar.gz.sig
gpg: Signature made Thu 02 Oct 2008 05:48:30 PM METDST using DSA key ID
E8A3FEC4
gpg: BAD signature from "Tim Starling <tstarling(a)wikimedia.org>"
Looks like Tim forgot to update the GPG signature files when he
re-issued the release; we'll make sure they get re-done. The file
checksums match, so we're good for now. :)
- -- brion
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla -
http://enigmail.mozdev.org
iEYEARECAAYFAkjqShkACgkQwRnhpk1wk46K2gCcDWJw7JV8fnhnc/9cq6x/61/I
jm8AoKErb2LFdtGf6MVAF/hE+W7PucHZ
=HmPc
-----END PGP SIGNATURE-----