[Gnu-arch-users] possible bug in signature verification

[Victor V. Shkamerda]

Hello,

I've just noticed that tla did not verify signatures for revisions 
cached in archive, e.g. continuation revision. I suppose nobody noticed 
this yet because they are using revision libraries and therefore are 
getting these revisions from there instead. Try for example "tla get 
tla--devo" without your revision library. I'm getting a nice "INVALID 
SIGNATURE ON REVISION!... checksum file: checksum... trouble reading 
checksum file for address@hidden/tla--devo--1.2--base-0" despite the 
fact that it's there, but in file checksum.cacherev.

With best regards,
Victor Shkamerda
--
DISCLAIMER:
Any e-mail messages from the National Bank of Moldova are sent in good faith, 
but shall not be binding nor construed as constituting any obligation on the 
part of the Bank.
The information transmitted is intended only for the person or entity to which 
it is addressed and may contain confidential and/or privileged material. If you 
received this in error, please contact the sender and delete the material from 
any computer.