Missing PGP signature on INN 2.4.2 tarball

[Russ Allbery]

Greg Pratt <gp at panix.com> writes:

> This isn't a bug in the INN package itself, but with the web page
> <http://www.isc.org/sw/inn/> and the download links for INN 2.4.2
> contained therein.

> One of the frames of this document contains two links, one for the
> source tarball, and another for the file containing its (detached) PGP
> signature:

>     ftp://ftp.isc.org/isc/inn/inn-2.4.2.tar.gz
>     ftp://ftp.isc.org/isc/inn/inn-2.4.2.tar.gz.asc

> Unfortunately, the second link is broken.  And in poking around the
> directory it's supposed to be in on the FTP server, I can't find
> anything that looks like a misnamed file.  While the 2.3.5 and 2.4.1
> distribution tarballs have corresponding .asc signature files, the one
> for 2.4.2 seems to have gone missing.

I could have sworn it was there originally.  Weird.

> I also noticed that the original announcement for INN 2.4.2 (message ID
> <87vfask6aq.fsf at windlord.stanford.edu> in news.software.nntp), Russ
> Allbery stated, "A PGP signature will be available in the same directory
> shortly."  I'm guessing Mr. Allbery celebrates Christmas, and ran out
> the door immediately after posting that message nearly a year ago. :)

Nope, don't celebrate Christmas.  :)  However, I'm not the person who
signs the tarballs, so I send a message to the isc.org folks after doing a
release and ask them to do the signature.

Maybe I should just start signing it myself.

> Would you please either (1) place the missing signature file in this
> directory, or (2) remove the errant link from the aforementioned web
> page?

I've signed the tarball myself and put that signature file up.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>