httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Sander Temme <>
Subject Re: Adding timestamp to apache releases?
Date Mon, 01 Oct 2007 13:52:18 GMT

On Oct 1, 2007, at 12:34 AM, Boyle Owen wrote:

> Is there a reason for the coyness or is it just an oversight, like
> people who send out invites to parties with elaborate directions and
> clip-art but forget to put the date?

PGP to the rescue!  Just downloaded the release, and Safari preserves  
the modification time:

[sctemme@Graymalkin] downloads $ curl -I " 
HTTP/1.1 200 OK
Date: Mon, 01 Oct 2007 13:51:22 GMT
Server: Apache
Last-Modified: Thu, 06 Sep 2007 19:31:02 GMT
ETag: "547541-5bfe97-46e05576"
Accept-Ranges: bytes
Content-Length: 6028951
Content-Type: application/x-gzip

[sctemme@Graymalkin] downloads $ ls -lt httpd-2.2.6.tar.gz*
-rw-r--r--   1 sctemme  admin       53 Sep  6 12:31  
-rw-r--r--   1 sctemme  admin  6028951 Sep  6 12:31 httpd-2.2.6.tar.gz
-rw-r--r--   1 sctemme  admin      186 Sep  6 12:31  

Now when I verify the PGP signature:

[sctemme@Graymalkin] downloads $ gpg --verify httpd-2.2.6.tar.gz.asc
gpg: Signature made Tue Sep  4 13:09:41 2007 PDT using DSA key ID  
gpg: Good signature from "Jim Jagielski <>"
gpg:                 aka "Jim Jagielski <>"
gpg:                 aka "Jim Jagielski <>"
gpg:                 aka "Jim Jagielski <>"
gpg:                 aka "Jim Jagielski <>"

Note the time stamp on the signature.  Of course this is the time of  
the clock on Jim's computer: I don't think GPG can get a trusted  
timestamp for signatures.  I looked through the options and saw none.

Perhaps that's something to look into, but for now there is a  
timestamp on the signature.


Sander Temme
PGP FP: 51B4 8727 466A 0BC3 69F4  B7B8 B2BE BC40 1529 24AF

View raw message