[GHC] #7544: GHC downloads are unsigned

GHC ghc-devs at haskell.org
Thu Sep 25 21:41:59 UTC 2014


#7544: GHC downloads are unsigned
--------------------------------------------+---------------------------
              Reporter:  afcowie            |            Owner:
                  Type:  feature request    |           Status:  closed
              Priority:  normal             |        Milestone:  7.10.1
             Component:  Build System       |          Version:  7.6.1
            Resolution:  fixed              |         Keywords:
      Operating System:  Unknown/Multiple   |     Architecture:  Other
       Type of failure:  Documentation bug  |       Difficulty:  Unknown
             Test Case:                     |       Blocked By:
              Blocking:                     |  Related Tickets:
Differential Revisions:                     |
--------------------------------------------+---------------------------

Comment (by hvr):

 Replying to [comment:5 nomeata]:
 > GPG signatures would still be nice. For example uscan, the tool Debian
 uses to download upstream tarballs, can automatically verify them by
 including the corresponding key in the Debian packaging meta-data.

 fwiw, the announcement contained GPG-signed hashes:
   http://www.haskell.org/pipermail/glasgow-haskell-
 users/2014-July/025105.html

--
Ticket URL: <http://ghc.haskell.org/trac/ghc/ticket/7544#comment:6>
GHC <http://www.haskell.org/ghc/>
The Glasgow Haskell Compiler


More information about the ghc-tickets mailing list