Skip Menu |

This queue is for tickets about the Class-MethodMaker CPAN distribution.

Report information
The Basics
Id: 59189
Status: resolved
Priority: 0/
Queue: Class-MethodMaker
People
Owner: Nobody in particular
Requestors: ANDK [...] cpan.org
Cc:
AdminCc:
Bug Information
Severity: Important
Broken in:
  • 2.16
  • 2.18
Fixed in: 2.19

History Show all quoted text
  Thu Jul 08 00:23:48 2010 ANDK [...] cpan.org - Ticket created
Subject: Broken Signature
~/.cpan/build/Class-MethodMaker-2.16-7C32Qi% cpansign -v [CPANSHELL] Executing gpg --verify --batch --no-tty --keyserver=hkp://pool.sks-keyservers.net:11371 --keyserver-options=auto-key-retrieve SIGNATURE gpg: Signature made Tue 11 May 2010 12:42:21 AM CEST using DSA key ID 080ABA07 gpg: Good signature from "Steffen Schwigon <ss5@renormalist.net>" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 65BD 0DA2 B8A0 7FB0 047D 3837 AD05 796B 080A BA07 --- SIGNATURE 2010-05-11 00:42:39.000000000 +0200 +++ - 2010-07-08 06:22:25.641645758 +0200 @@ -19,7 +19,7 @@ SHA1 efa8cb615886410be8de15f5a6925697f624d278 INSTALL SHA1 cf6a392361ad119496ff9205dafe4ab72d4394f2 MANIFEST SHA1 57082e147b77092b33b57411451a6b9030823f95 MANIFEST.SKIP -SHA1 cb34444c63493fcc305792e2f4ce11aac8226c8c META.yml +SHA1 62a6ac4a22cb5e3cd27bc6efd34b42cba9969804 META.yml SHA1 eceaf9c21ce600ed653d0b5bdc0cbbadde16c7b9 Makefile.PL SHA1 bcdbe850216b8d70c2d9c7b32550860572196a82 MethodMaker.xs SHA1 a79be83e67bf815b27b226ad1f2403a7d2390e0c README ==> MISMATCHED content between SIGNATURE and distribution files! <==
  Sun Apr 17 15:22:16 2011 ANDK [...] cpan.org - Severity Normal changed to Important
  Sun Apr 17 15:22:16 2011 ANDK [...] cpan.org - Broken in 2.18 added
  Mon Aug 15 10:53:05 2011 RWSTAUNER [...] cpan.org - Correspondence added
I confirm. It looks like the SIGNATURE files hasn't been updated since 2.15: https://metacpan.org/diff/release/SCHWIGON/Class-MethodMaker-2.15/SCHWIGON/Class-MethodMaker-2.18#SIGNATURE
  Mon Aug 15 10:53:07 2011 The RT System itself - Status changed from 'new' to 'open'
  Mon Oct 10 11:05:57 2011 RWSTAUNER [...] cpan.org - Correspondence added
I'm currently setting "cpanconfig: {check_sigs: 0}" as a distropref to work around this.
Subject: Class-MethodMaker-2.18.yml
--- comment: "RT 59189" match: distribution: "^SCHWIGON/Class-MethodMaker-2.18.tar.gz" cpanconfig: check_sigs: 0
  Sun Dec 15 18:43:52 2013 schwigon [...] cpan.org - Correspondence added
2.19 doesn't ship a SIGNATURE file anymore. I got a bit tired of fiddling manually with it. Steffen -- Steffen Schwigon <ss5@renormalist.net> Dresden Perl Mongers <http://dresden-pm.org/>
  Sun Dec 15 18:43:53 2013 schwigon [...] cpan.org - Status changed from 'open' to 'resolved'
  Sun Dec 15 18:44:25 2013 schwigon [...] cpan.org - Fixed in 2.19 added