[tz] PGP signatures on the FTP server? (was Re: tzcode2012g and tzdata2012g available)

[enh]

any chance we can have the PGP files on the FTP sever too, like
openssl does (http://www.openssl.org/source/)? if there were a
corresponding .md5/.sha1/.asc file, i'd modify Android's tzdata
updating script to actually check the signatures. at the moment, with
the signature only available in the release mail, it's not obvious how
i'd automate this.

On Wed, Oct 17, 2012 at 9:39 PM, Paul Eggert <eggert at cs.ucla.edu> wrote:
> The 2012g release of the tz code and data is available.  It reflects
> the following changes recently circulated on the tz mailing list:
>
>         Samoa fall 2012 and later.  (Thanks to Nicholas Pereira
>         and Robert Elz.)
>
>         Palestine fall 2012.  (Thanks to Steffen Thorsen.)
>
>         Assume C89.
>
> This release does not reflect the possible changes discussed yesterday
> for Tocantins and Bahia; I plan to send out further email about that
> soon.  Nor does it include the minor C style-code change for NULL
> versus 0 -- I plan to get to that the next time around, since it
> doesn't affect functionality.
>
> To attack the version-number problem, this release ships the file
> 'Makefile' (which contains the release number) in both the tzcode and
> the tzdata tarballs.  The two Makefiles are identical, and should be
> identical in any matching pair of tarballs, so it shouldn't matter
> which order you extract the tarballs.  Perhaps we can come up with a
> better version-number scheme at some point; this scheme does have the
> virtue of not adding more files.
>
> Here are links to the release files:
>
>   http://www.iana.org/time-zones/repository/releases/tzcode2012g.tar.gz
>   http://www.iana.org/time-zones/repository/releases/tzdata2012g.tar.gz
>
>   ftp://ftp.iana.org/tz/releases/tzcode2012g.tar.gz
>   ftp://ftp.iana.org/tz/releases/tzdata2012g.tar.gz
>
> As usual, links to the latest release files are here:
>
>   http://www.iana.org/time-zones/repository/tzcode-latest.tar.gz
>   http://www.iana.org/time-zones/repository/tzdata-latest.tar.gz
>
>   ftp://ftp.iana.org/tz/tzcode-latest.tar.gz
>   ftp://ftp.iana.org/tz/tzdata-latest.tar.gz
>
> This release corresponds to commit
> ec6a124c84ef45054c84cbe49ee8ebe27473c01c in the unofficial github
> repository at <https://github.com/eggert/tz>.
>
> Here is the GPG checksum for the release files:
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
>
> iQIcBAABAgAGBQJQf4M1AAoJEO2X6Q5iqn40cgoP/2gNWNwj4ZSXadowHbjoA9QT
> 8gqjdw5vXYbIczBei0uwuG5X/yvgiSk57DCbR2XOa7IwPkIom0HbJpL0FYPB8I5D
> cMdr7IYbksGXnnVn9mbtiTM06IJRxIU/d6O3c/2yHgv5yJp8JMj4dr746iI4EVGZ
> osA1FDefsCpIaE8/axToY83uLaroTKjHAqucQoQ/+5htTTcfoEM/MNX7ZcLS7uxl
> alHUNWH2KCxHiYC3HBL04B+dHdY3K3HaOR57TwDbzHSnjcBwa45jaDGBo9fV/0aZ
> cpbisJ+5O/IYl4uwUTYpFPrfcy95KxdxaIp/K167uDbc/Nb+rUOY9BjdqGjVyGHt
> V749gV1tO4jnzJMUF+sIuvhCDME802NOs2yOnMTltKLNDfivouT8PAxAEF4ozFlJ
> gBUtKfWMb2teQpDp64K4bQAZOUFEjW1KuETIPD9oq7tNx2Ohp9QGl08pKxA66OaD
> 8GiBqmjA/NzM7xmZqWSMqu6GSrSQnA5PDMZM/B4m79cVYzYoGi7FBLq3hBEKCXKG
> y3TWNnVjRXVamHh4cWY3i+1fC+se+DobR/dt/l1abtJ/HdnxNcQQc57eB97yAvQI
> Xg7u0Hhf6uqJkGohoyA7CWpr1ArEszBIfgQ4niCTa5anT5KrrQly9Imkt1i+9pdi
> SFh0tDFyzyL0Fhcc0VvY
> =+Nmz
> -----END PGP SIGNATURE-----
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
>
> iQIcBAABAgAGBQJQf4NJAAoJEO2X6Q5iqn4007sP/R1bciDNZ1CbkCNT4EMVaK8E
> PLhql3SsNZrPJYZHm5Ph03uG8YvlY1ysHgSQn9dz/MNQ8eO3oBno06To/1Tn34Rh
> W6J0Iyrw9EOuCykke0oF/EmUh2T89DFJUzKbg+3x5UZ8QM+mhHHCL+5wSEm8aY9m
> zmleAyhwdh+4kgUvVT6f3IisWY2FCOufQZ7oJx8g1QHuPy1lBI8jLqHbUNWvR0CD
> PyAvhEUPGRDfWUM7jkPpN8tK4LE4PAM0OH3lXhOct221heQ05AFr5+N8i+B3z2lR
> K0JCeF2QtDtXnkYTKIUMGfXoA7KXTVkAO3gSjcPTusSF6WByLIhiP7I025x9Aglq
> BGwy1NxVbdiEv51ibiR9VZs28zqxdTnxKoL6cwkmbWApk6XyG/aCZQXjN+92Mtv0
> eXRgIHeWzlOE7/b7SHi06iU9p23qR9AQNRpFwZqZHCK/tnn1kl6zl+WKjrM6ZhOO
> 1WvN1slat57p790+ekld1TbAEU3pto5QZekOMwOdV/5+w3Q09J83AzfNZEeKZS4F
> GE/RWo6+nCrFUNBMJkx0uOMwcIWW3lK9FEknrfT/Z27XkDKDRL4j5RdWs+juk2Oq
> z3fUJMqb0TRgIgWl1RIsvWCiAXI4XAojD2Qx3zYr4smhcV/rEZ4NiPLoh/lLY6j2
> tuePXzMqu3pQ16Uc/d9h
> =8M0s
> -----END PGP SIGNATURE-----



-- 
Elliott Hughes - http://who/enh - http://jessies.org/~enh/
NIO, JNI, or bionic questions? Mail me/drop by/add me as a reviewer.