Closed Bug 800663 Opened 13 years ago Closed 13 years ago

detached signature file missing for firefox releases (16.0.1)

Categories

(Release Engineering :: General, defect)

Product:
Release Engineering
Component:
General
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: GbSlack, Unassigned)

References

Details

User Agent: Mozilla/5.0 (X11; Linux i686; rv:15.0) Gecko/20100101 Firefox/15.0.1 Build ID: 20120905151427 Steps to reproduce: want to gpg verify the authenticity of firefox-16.0.1.tar.bz2 in ftp://releases.mozilla.org/pub/mozilla.org/firefox/releases/16.0.1/linux-i686/de Actual results: the detached signature file firefox-16.0.1.tar.bz2.asc is missing at least at ftp://releases.mozilla.org/pub/mozilla.org/firefox/releases/16.0.1/linux-i686/de Expected results: a detached signature file firefox-16.0.1.tar.bz2.asc should be there: ftp://releases.mozilla.org/pub/mozilla.org/firefox/releases/16.0.1/linux-i686/de
Component: Untriaged → Other
Product: Firefox → Release Engineering
QA Contact: joduinn
See Also: → 801285
Version: 16 Branch → unspecified
This was deliberately changed in bug 763632. We only sign the big *SUMS files now for performance reasons. To verify a file you should checksum it (probably SHA512), match it up to the checksum in a SUMS file, and then verify the detached signature of the SUMS file.
Status: UNCONFIRMED → RESOLVED
Closed: 13 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.