5 Jul
2020
5 Jul
'20
9:24 p.m.
On Jul 5, 2020, at 9:10 PM, Adam Bishop <Adam.Bishop@jisc.ac.uk> wrote:
Are the tarballs from ftp.freeradius.org mirrored anywhere using HTTP that isn't GitHub?
Not right now.
The GitHub tarballs have a differently named root folder, so the signature checking is failing. Hashes show they're different:
Yes. We create our own tarballs and sign those. When we tag a release, GitHub *also* creates it's own tarballs, which are different. GitHub doesn't seem to have a way to upload our own tarballs. And TBH, I won't sign random things created by a third party. We'll take a look at exposing the FTP site via HTTP. Alan DeKok.