summaryrefslogtreecommitdiff
path: root/6c/f3085bae1c8c9306f2dc2a2a6f0db7a7ca8732
blob: 7fabc7fb2da81b4306da8ad2f59fc2214acb1c2a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
Return-Path: <dev@jonasschnelli.ch>
Received: from smtp1.linuxfoundation.org (smtp1.linux-foundation.org
	[172.17.192.35])
	by mail.linuxfoundation.org (Postfix) with ESMTPS id A8A1F15AE
	for <bitcoin-dev@lists.linuxfoundation.org>;
	Thu, 24 Sep 2015 09:18:26 +0000 (UTC)
X-Greylist: from auto-whitelisted by SQLgrey-1.7.6
Received: from server3 (server3.include7.ch [144.76.194.38])
	by smtp1.linuxfoundation.org (Postfix) with ESMTP id E00F7E8
	for <bitcoin-dev@lists.linuxfoundation.org>;
	Thu, 24 Sep 2015 09:18:25 +0000 (UTC)
Received: by server3 (Postfix, from userid 115)
	id 5F3C92E604B2; Thu, 24 Sep 2015 11:18:24 +0200 (CEST)
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
	smtp1.linux-foundation.org
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00, FSL_HELO_NON_FQDN_1
	autolearn=ham version=3.3.1
Received: from Jonass-MacBook-Pro.local (cable-static-140-182.teleport.ch
	[87.102.140.182]) by server3 (Postfix) with ESMTPSA id AE8ED2D0091B
	for <bitcoin-dev@lists.linuxfoundation.org>;
	Thu, 24 Sep 2015 11:18:23 +0200 (CEST)
Message-ID: <5603BFD8.2090608@jonasschnelli.ch>
Date: Thu, 24 Sep 2015 11:18:16 +0200
From: Jonas Schnelli <dev@jonasschnelli.ch>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10;
	rv:31.0) Gecko/20100101 Thunderbird/31.7.0
MIME-Version: 1.0
To: bitcoin-dev@lists.linuxfoundation.org
References: <CAAMhxnzWTNMQVcziTx9f4AYE0rvi8y2JKbYRF5t_ds4esx=Jkw@mail.gmail.com>	<CAOG=w-uzmC3-2vYbSYDwvDhhP0FyC72G2dBVuj83zBMhqrvGOA@mail.gmail.com>	<CAAMhxnw8J8nZbWPBEA9HOfJH0iiWO3uvD_frJ089R1kcbhciSg@mail.gmail.com>	<CAOG=w-uCLHEMHkGz8TGEPuqs0AshX+c=xt2VciCF5qkVdoRn-A@mail.gmail.com>
	<CAAMhxnw8KQeeWD5gz3kLsdgObXSaiaPGpS6Pt=ufTLarcxp5Cg@mail.gmail.com>
In-Reply-To: <CAAMhxnw8KQeeWD5gz3kLsdgObXSaiaPGpS6Pt=ufTLarcxp5Cg@mail.gmail.com>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 8bit
Subject: Re: [bitcoin-dev] CI Build for Bitcoin - Some Basic Questions about
 Gitian and other stuff
X-BeenThere: bitcoin-dev@lists.linuxfoundation.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Bitcoin Development Discussion <bitcoin-dev.lists.linuxfoundation.org>
List-Unsubscribe: <https://lists.linuxfoundation.org/mailman/options/bitcoin-dev>,
	<mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=unsubscribe>
List-Archive: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/>
List-Post: <mailto:bitcoin-dev@lists.linuxfoundation.org>
List-Help: <mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=help>
List-Subscribe: <https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev>,
	<mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Sep 2015 09:18:26 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi Roy

> So who physically manually uploads the gitian build to bitcoin.org 
> <http://bitcoin.org>?

It's done by the core devs (very likely the project maintainer).
I think it doesn't matter who did the upload to bitcoin.org.

What really would matter is – if users deciding to run a pre-compiled
version of bitcoin-core – that they verify the binary against the
available gitian sigs.

Signatur repository:
https://github.com/bitcoin/gitian.sigs

PGP Pubkeys (mostly also available over gpg key servers):
https://github.com/bitcoin/bitcoin/tree/master/contrib/gitian-downloader

Instruction available here:
https://www.reddit.com/r/Bitcoin/wiki/verifying_bitcoin_core


/jonas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=vP2n
-----END PGP SIGNATURE-----