new_installer_offline_XXXX.jar.sig is supposed to be a gpg signature of 
new_installer_offline_XXXX.jar.
Unfortunately, due to a bug in a script, everything before 1245 has bogus 
signatures, resulting from me signing the jar with gpg and *then* signing it 
internally with jarsigner. Therefore I am uploading .newsig's with the new key 
(which was created around build 1241). I am only signing those files that I 
have copies of locally, so a few early jars are not signed at all. This bug did 
not affect other signatures as far as I can see.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
URL: 
<https://emu.freenetproject.org/pipermail/devl/attachments/20100501/71c039e7/attachment.pgp>

Reply via email to