search

AntonKueltz / fastecdsa

Python library for fast elliptic curve crypto
https://pypi.python.org/pypi/fastecdsa
The Unlicense
270 stars 78 forks source link

tag 2.2.2 unsigned, PyPI upload missing a signature file #77

Closed lmartinez-mirror closed 3 years ago

lmartinez-mirror commented 3 years ago

Hi, I maintain fastecdsa on the AUR for Arch Linux. The package fetches a signature file that verifies the source tarball from PyPI.

However, with version 2.2.2, both the tag and the tarball are missing a signature and/or signature file, respectively. Could you please make an effort to sign your tags or, at the very least, ensure your tarballs have a corresponding signature file on PyPI?

Thanks!

AntonKueltz commented 3 years ago

Yes, this was an oversight on my part (switched to a new dev machine and didn’t set up new keys for pypi publishing). The next release will include the corresponding signatures again. Let me know if there’s anything in 2.2.2 that you need that warrants an immediate new release with those files.

AntonKueltz commented 3 years ago

Version 2.2.3 (pypi, tag) should have the signatures again.