The branch, master has been updated
via b442e762543ee063ca04e793f9bc830481397835 (commit)
via 0745e67732776c48b69ca9441debb54ac9a891e5 (commit)
via 7cbba730871e4aee09386b6361acfd748fb232b1 (commit)
from 0e4960ddf41084e99ce5b279a8f942f631770161 (commit)
- Log -----------------------------------------------------------------
commit b442e762543ee063ca04e793f9bc830481397835
Author: Zane van Iperen <z...@zanevaniperen.com>
AuthorDate: Wed Feb 24 13:45:42 2021 +1000
Commit: Thilo Borgmann <thilo.borgm...@mail.de>
CommitDate: Tue Mar 16 14:29:13 2021 +0100
web/download: add prominent signing key download link
Signed-off-by: Zane van Iperen <z...@zanevaniperen.com>
diff --git a/src/download b/src/download
index b82f446..a6483a6 100644
--- a/src/download
+++ b/src/download
@@ -5,6 +5,11 @@
<i class="fa fa-cloud-download"></i>
Download Source Code
<small>ffmpeg-snapshot.tar.bz2</small>
+ </a>
+ <a href="ffmpeg-devel.asc" class="btn btn-success">
+ <i class="fa fa-key"></i>
+ Download PGP Signing Key
+ <small>ffmpeg-devel.asc</small>
</a>
<br>
<a href="#releases">More releases</a>
commit 0745e67732776c48b69ca9441debb54ac9a891e5
Author: Zane van Iperen <z...@zanevaniperen.com>
AuthorDate: Wed Feb 24 12:33:08 2021 +1000
Commit: Thilo Borgmann <thilo.borgm...@mail.de>
CommitDate: Tue Mar 16 14:29:13 2021 +0100
web/download: add signing key and verification instructions
As per discussion at
https://ffmpeg.org/pipermail/ffmpeg-devel/2021-February/276752.html
Signed-off-by: Zane van Iperen <z...@zanevaniperen.com>
diff --git a/htdocs/ffmpeg-devel.asc b/htdocs/ffmpeg-devel.asc
new file mode 100644
index 0000000..3a4d521
--- /dev/null
+++ b/htdocs/ffmpeg-devel.asc
@@ -0,0 +1,30 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=Rjbw
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/src/download b/src/download
index 3f0e4d2..b82f446 100644
--- a/src/download
+++ b/src/download
@@ -249,6 +249,40 @@
</div> <!-- table-responsive -->
<div></div>
+ <h4 id="release-verification">
+ <i class="fa fa-lock"></i>
+ Release Verification</h4>
+
+ <p>
+ All FFmpeg releases are cryptographically signed with
+ <a href="ffmpeg-devel.asc">our public PGP key</a> and should be verified
for
+ authenticity.
+ </p>
+ <pre>pub rsa2048 2011-04-26 [SC]
+ FCF986EA15E6E293A5644F10B4322F04D67658D8
+uid [ full ] FFmpeg release signing key
<ffmpeg-de...@ffmpeg.org>
+sub rsa2048 2011-04-26 [E]</pre>
+
+ <p>
+ To verify a release:
+ <ol>
+ <li>Import our public key into your local keyring:
+ <pre>$ curl https://ffmpeg.org/ffmpeg-devel.asc | gpg --import</pre>
+ </li>
+ <li>
+ Download a release tarball and its corresponding signature.
+ </li>
+ <li>
+ Verify the signature:
+ <pre>$ gpg --verify ffmpeg-4.3.2.tar.xz.asc ffmpeg-4.3.2.tar.xz
+gpg: Signature made Sun 21 Feb 2021 06:35:15 AEST
+gpg: using RSA key FCF986EA15E6E293A5644F10B4322F04D67658D8
+gpg: issuer "ffmpeg-de...@ffmpeg.org"
+gpg: Good signature from "FFmpeg release signing key
<ffmpeg-de...@ffmpeg.org>" [full]</pre>
+ </li>
+ </ol>
+ </p>
+
<h4 id="releases">
<i class="fa fa-history"></i>
Releases</h4>
commit 7cbba730871e4aee09386b6361acfd748fb232b1
Author: Zane van Iperen <z...@zanevaniperen.com>
AuthorDate: Wed Feb 24 12:38:20 2021 +1000
Commit: Thilo Borgmann <thilo.borgm...@mail.de>
CommitDate: Tue Mar 16 14:29:13 2021 +0100
gitignore: add /node_modules/
Signed-off-by: Zane van Iperen <z...@zanevaniperen.com>
diff --git a/.gitignore b/.gitignore
index b215828..60a2b0a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,4 @@
/htdocs/components
/htdocs/style.less
/htdocs/fonts/*.woff2
+/node_modules/
-----------------------------------------------------------------------
Summary of changes:
.gitignore | 1 +
htdocs/ffmpeg-devel.asc | 30 ++++++++++++++++++++++++++++++
src/download | 39 +++++++++++++++++++++++++++++++++++++++
3 files changed, 70 insertions(+)
create mode 100644 htdocs/ffmpeg-devel.asc
hooks/post-receive
--
_______________________________________________
ffmpeg-cvslog mailing list
ffmpeg-cvslog@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog
To unsubscribe, visit link above, or email
ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".
