On Tue, Aug 09, 2022 at 03:40:52PM +0000, Jeremy Stanley wrote: > On 2022-08-09 08:19:06 -0700 (-0700), Ross Vandegrift wrote: > > On Tue, Aug 09, 2022 at 06:26:55AM +0000, Ethan wrote: > > > I cannot find GPG-signed SHA512SUMS files for the Debian Cloud images. > > > Where are the SHA512SUMS.sign files for verification? > > > > Sorry, there aren't currently signatures for those checksums. > > Unfortunately, the readme served at > https://cdimage.debian.org/mirror/cdimage/cloud/ suggests otherwise: > > "These checksum files are also signed - see SHA512SUMS.sign, etc." > > How can we go about adjusting the text there to reflect reality? https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012552 AFAIK, the text lives in a webpage served from pettersson.d.o - which is a core machine, requiring special permission to access. I was supposed to follow up on the issue, but didn't get farther than the bug report. Ross
Attachment:
signature.asc
Description: PGP signature