Bug #62241 for App-CLI: Signature broken

Mon Oct 18 16:18:25 2010 ANDK [...] cpan.org - Ticket created

Subject:

Signature broken

RT doesn't have a slot for 0.10 yet, but please see: % cpansign -v [CPANSHELL] No such file: META.yml Executing gpg --verify --batch --no-tty --keyserver=hkp://pool.sks-keyservers.net:11371 --keyserver-options=auto-key-retrieve SIGNATURE gpg: Signature made Thu 26 Feb 2009 04:24:28 AM CET using DSA key ID 96406EA0 gpg: Good signature from "Alex Vandiver <alexmv@mit.edu>" gpg: aka "Alex Vandiver <alexmv@bestpractical.com>" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: C361 0793 B631 337F BF6F C7BA 31F9 5625 9640 6EA0 --- SIGNATURE 2010-10-18 08:39:21.000000000 +0200 +++ - 2010-10-18 22:16:19.070497636 +0200 @@ -14,9 +14,9 @@ -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 -SHA1 7fd9bee22194a446efee9479819cb1e2756f4525 Changes -SHA1 63b10e1b9dc12d9570df6daa4233ee44ce60c043 MANIFEST -SHA1 8e6b388a9c7135b46f8d5cec0f7de3c90b5cdaa4 META.yml +SHA1 e1337073831fe2fde3d28064528ce0bec8fc16b2 Changes +SHA1 b7a82dfe17bd1fecb60ce919c396a59d0d12eb04 MANIFEST +SHA1 053ede8143ea700752dd932061f621577bf8a226 MANIFEST.SKIP SHA1 2a8226162700b54e808b0d95edeb545d27073d07 Makefile.PL SHA1 603bb9de29fb8cba7f13409c546750972eff645d inc/Module/AutoInstall.pm SHA1 ae018c4565c1277089ca8f1b28f888d95430cb7f inc/Module/Install.pm @@ -29,9 +29,9 @@ SHA1 7ad1da4fff7a1e7a634c9d734111c8292be08884 inc/Module/Install/Metadata.pm SHA1 e9aa83f3e8b16ccfce544a90a57b63b70a497759 inc/Module/Install/Win32.pm SHA1 ade2ac0b0246d4d8e28fa46942e53f6925abda46 inc/Module/Install/WriteAll.pm -SHA1 ba3a180b4915e0060ced5135e2d6441e766823e0 lib/App/CLI.pm -SHA1 afa50c5c799445a48385ce9d6f2589bb8d90d00d lib/App/CLI/Command.pm -SHA1 bbda8c25ee4e1a704cb574e52b1db4e85e008c16 lib/App/CLI/Command/Help.pm +SHA1 6455162426f3713bf15c60ca7d0b301933e05da6 lib/App/CLI.pm +SHA1 30a08055b8d5246cfe7e8fef53b1a76933602cef lib/App/CLI/Command.pm +SHA1 3f8db3e4ad257ce0e361f6b9ced9a898a82f3cb4 lib/App/CLI/Command/Help.pm SHA1 2e2fae52c7271120faa67828599c8e15c6ee52f6 t/1basic.t SHA1 bdf8cf34a6036e32739dc19cb775db69952184cb t/lib/CLITest.pm SHA1 d8d9e73b090de778d7a046c6cc4ad01b3dc52612 t/lib/MyApp.pm Maybe you did not sign this release?

Mon Nov 15 02:20:19 2010 ANDK [...] cpan.org - Broken in 0.10 added

Mon Nov 15 02:20:20 2010 ANDK [...] cpan.org - Broken in 0.102 added

Mon Nov 15 02:20:20 2010 ANDK [...] cpan.org - Broken in 0.103 added

Thu Dec 02 14:45:50 2010 ANDK [...] cpan.org - Broken in 0.2 added

Thu Dec 02 14:45:50 2010 ANDK [...] cpan.org - Broken in 0.3 added

Thu Dec 02 14:45:51 2010 ANDK [...] cpan.org - Broken in 0.31 added

Fri Dec 03 00:21:09 2010 ANDK [...] cpan.org - Correspondence added

If you do not want to sign your uploads why include a signature file at all? Hmm, maybe you're not receiving mails from RT:(

Fri Dec 03 00:21:10 2010 ANDK [...] cpan.org - Status changed from 'new' to 'open'

Fri Dec 03 01:07:53 2010 cpan [...] chmrr.net - Correspondence added

On Fri Dec 03 00:21:09 2010, ANDK wrote: Show quoted text

> If you do not want to sign your uploads why include a signature file at > all? Hmm, maybe you're not receiving mails from RT:(

c9s has taken over maintenance of this, though he hasn't updated the SIGNATURE since he did so. https://github.com/c9s/app-cli/pull/3 is the simple fix, which I hope he takes. - Alex

Wed Jun 28 17:21:04 2017 paultcochrane [...] gmail.com - Correspondence added

The signature file had long been removed from the repository, however this change had never made it into a release. A new release has just been cut (0.45) and the problem with the signature file should now be resolved.

Wed Jun 28 17:21:21 2017 paultcochrane [...] gmail.com - Status changed from 'open' to 'resolved'