Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Sha of 3.6 #2

Merged
merged 1 commit into from Jan 1, 2020
Merged

Update Sha of 3.6 #2

merged 1 commit into from Jan 1, 2020

Conversation

Carreau
Copy link
Collaborator

@Carreau Carreau commented Dec 24, 2019

It looks like the sha was wrong; but for whatever reason it was not
installed via homebrew on travis/3.6 until a week or so ago as travis
images still ahd 3.6 (?). I did not manage to check the GPG signatre of
3.6 on python.org; so it would be good to do that as well;

This should solve failure of test on IPython repo.

It looks like the sha was wrong; but for whatever reason it was not
installed via homebrew on travis/3.6 until a week or so ago as travis
images still ahd 3.6 (?). I did not manage to check the GPG signatre of
3.6 on python.org; so it would be good to do that as well;

This should solve failure of test on IPython repo.
@Carreau Carreau changed the title Update Sha, Update Sha of 3.6 Dec 24, 2019
Carreau added a commit to Carreau/ipython that referenced this pull request Dec 27, 2019
This will need to be reverted at some points in the future once
minrk/homebrew-python-frameworks#2 is merged
@Carreau
Copy link
Collaborator Author

Carreau commented Dec 27, 2019

Verified that the signature file and the pkg is correct:

$ gpg --keyserver keyserver.ubuntu.com --recv-keys 0D96DF4D4110E5C43FBFB17F2D347EA6AA65421D
gpg: key 2D347EA6AA65421D: 18 signatures not checked due to missing keys
gpg: key 2D347EA6AA65421D: public key "Ned Deily (Python release signing key) <nad@python.org>" imported
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: next trustdb check due at 2033-10-12
gpg: Total number processed: 1
gpg:               imported: 1

$ gpg --verify python-3.6.8-macosx10.6.pkg.asc python-3.6.8-macosx10.6.pkg
gpg: Signature made Mon Dec 24 08:15:55 2018 CET
gpg:                using RSA key 0D96DF4D4110E5C43FBFB17F2D347EA6AA65421D
gpg: Good signature from "Ned Deily (Python release signing key) <nad@python.org>" [unknown]
gpg:                 aka "Ned Deily (Python release signing key) <nad@acm.org>" [unknown]
gpg:                 aka "Ned Deily <nad@baybryj.net>" [unknown]
gpg:                 aka "keybase.io/nad <nad@keybase.io>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 0D96 DF4D 4110 E5C4 3FBF  B17F 2D34 7EA6 AA65 421D

To be sure it's trusted I can also verify via keybase.

$ keybase pgp pull nad
▶ INFO Imported key for nad. [tags:ENG=BIh26ULAKyq4]
▶ INFO Imported key for nad. [tags:ENG=BIh26ULAKyq4]

$ keybase pgp verify -d python-3.6.8-macosx10.6.pkg.asc -i python-3.6.8-macosx10.6.pkg
Signature verified. Signed by nad 1 year ago (2018-12-24 08:15:55 +0100 CET).
PGP Fingerprint: 0d96df4d4110e5c43fbfb17f2d347ea6aa65421d.

@minrk minrk merged commit 6c65787 into minrk:master Jan 1, 2020
@minrk
Copy link
Owner

minrk commented Jan 1, 2020

Thanks!

@Carreau Carreau deleted the fix-36-sha branch January 6, 2020 16:12
@Carreau
Copy link
Collaborator Author

Carreau commented Jan 6, 2020

Thanks ! Happy new year !

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants