Public SourceMage Discussion List

[Jeremy Blosser <jblosser-smgl AT firinn.org>]

On Jun 06, Jeremy Blosser [jblosser-smgl AT firinn.org] wrote:
> On May 20, seth AT swoolley.homeip.net [seth AT swoolley.homeip.net] wrote:
> > I wrote a small bash function to calculate the hash:
> > 
> > probst() {
> >   D="$(pgpdump -i)"
> >   for i in '' $(seq 2 1000) ; do
> >     echo "$D$i" | gpg --print-md sha512 | tr -d '\n ' | tr '[A-f]' '[a-f]'
> >     echo
> >     if [ "$1" == "$i" ]; then break; fi
> >   done
> > }
> 
> FYI we *are* trying to move to using this on the latest vote, but there
> were some communication problems.  Apologies if people are getting multiple
> hashes from Eric.
> 
> Most importantly we learned that pgpdump by default uses the local system
> timezone to display the signature creation timestamp, this breaks the
> property of the hashes matching whether created on Eric's machine or yours.
> To force it to use UTC instead, use this instead:
> 
> probst() {
>   D="$(pgpdump -i -u)"
>   for i in '' $(seq 2 1000) ; do
>     echo "$D$i" | gpg --print-md sha512 | tr -d '\n ' | tr '[A-F]' '[a-f]'
>     echo
>     if [ "$1" == "$i" ]; then break; fi
>   done
> }
> 
> (The -u to pgpdump is the operative bit, I also fixed a non-significant
> typo.)

So we can all confirm this works, if I didn't screw up anything the output
of probst on the message this reply is to (Message-ID
20060606235821.GE30861 AT shade.firinn.org, AKA
https://lists.ibiblio.org/sympa/arc/sm-discuss/2006-June/014720.html) is:

137165403c381eb556a7005eed7a79d870873fec8bade25bcef5440f08b1974d9b3f3b74f2ed06e2943c1a8494ce89301693b0ef29901ee3ab8715ae50f2ac3e

If you spit the PGP signature from my message as seen in your MUA or from
that ML archive URL through probst you should get the exact same thing.

Attachment: pgpvs00hn4png.pgp
Description: PGP signature