https://bugzilla.redhat.com/show_bug.cgi?id=1834731 --- Comment #108 from Simone Caronni <negativo17@xxxxxxxxx> --- OK, this is much better: https://github.com/negativo17/bitcoin-core/blob/1c3ee00c999b0ed8b3e497c7d9019ab1d8bc006b/bitcoin-gpg.sh There is also another caveat, of all the GPG keys listed for the developers, only few have actually signed the release. The SHA256SUMS.asc file contains just 9 signatures. The script now makes sure to download only the valid keys listed in list of keys that have been used to sign. This is the output of the script: $ ./bitcoin-gpg.sh 22.0 Prepare directory and list of GPG keys used to sign the release... done. Attempting to download all listed GPG keys for release 22.0... done. List of valid keys used to sign the release: # 9D3CC86A72F8494342EA5FD10A41BDC3F4FAFF1C - Aaron Clauson (sipsorcery) Source21: bitcoin-9D3CC86A72F8494342EA5FD10A41BDC3F4FAFF1C-pubring.gpg # 152812300785C96444D3334D17565732E08E5E41 - Andrew Chow (achow101) Source22: bitcoin-152812300785C96444D3334D17565732E08E5E41-pubring.gpg # 590B7292695AFFA5B672CBB2E13FC145CD3F4304 - Antoine Poinsot (darosior) Source23: bitcoin-590B7292695AFFA5B672CBB2E13FC145CD3F4304-pubring.gpg # 0AD83877C1F0CD1EE9BD660AD7CC770B81FD22A8 - Ben Carman (benthecarman) Source24: bitcoin-0AD83877C1F0CD1EE9BD660AD7CC770B81FD22A8-pubring.gpg # D1DBF2C4B96F2DEBF4C16654410108112E7EA81F - Hennadii Stepanov (hebasto) Source25: bitcoin-D1DBF2C4B96F2DEBF4C16654410108112E7EA81F-pubring.gpg # 82921A4B88FD454B7EB8CE3C796C4109063D4EAF - Jon Atack (jonatack) Source26: bitcoin-82921A4B88FD454B7EB8CE3C796C4109063D4EAF-pubring.gpg # E777299FC265DD04793070EB944D35F9AC3DB76A - Michael Ford (fanquake) Source27: bitcoin-E777299FC265DD04793070EB944D35F9AC3DB76A-pubring.gpg # 9EDAFF80E080659604F4A76B2EBB056FD847F8A7 - Stephan Oeste (Emzy) Source28: bitcoin-9EDAFF80E080659604F4A76B2EBB056FD847F8A7-pubring.gpg # 71A3B16735405025D447E8F274810B012346C9A6 - Wladimir J. van der Laan (laanwj) Source29: bitcoin-71A3B16735405025D447E8F274810B012346C9A6-pubring.gpg -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component https://bugzilla.redhat.com/show_bug.cgi?id=1834731 _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
