1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
|
Return-Path: <chill@degreesofzero.com>
Received: from smtp3.osuosl.org (smtp3.osuosl.org [140.211.166.136])
by lists.linuxfoundation.org (Postfix) with ESMTP id 4F597C000D
for <bitcoin-dev@lists.linuxfoundation.org>;
Wed, 20 Oct 2021 19:43:33 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
by smtp3.osuosl.org (Postfix) with ESMTP id 45F686075E
for <bitcoin-dev@lists.linuxfoundation.org>;
Wed, 20 Oct 2021 19:43:33 +0000 (UTC)
X-Virus-Scanned: amavisd-new at osuosl.org
X-Spam-Flag: NO
X-Spam-Score: -2.017
X-Spam-Level:
X-Spam-Status: No, score=-2.017 tagged_above=-999 required=5
tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
NICE_REPLY_A=-0.117, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001,
SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: smtp3.osuosl.org (amavisd-new);
dkim=pass (2048-bit key)
header.d=degreesofzero-com.20210112.gappssmtp.com
Received: from smtp3.osuosl.org ([127.0.0.1])
by localhost (smtp3.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id kREmF3TWCRGV
for <bitcoin-dev@lists.linuxfoundation.org>;
Wed, 20 Oct 2021 19:43:32 +0000 (UTC)
X-Greylist: whitelisted by SQLgrey-1.8.0
Received: from mail-wm1-x335.google.com (mail-wm1-x335.google.com
[IPv6:2a00:1450:4864:20::335])
by smtp3.osuosl.org (Postfix) with ESMTPS id EF3426058C
for <bitcoin-dev@lists.linuxfoundation.org>;
Wed, 20 Oct 2021 19:43:31 +0000 (UTC)
Received: by mail-wm1-x335.google.com with SMTP id
y22-20020a1c7d16000000b003231ea3d705so131967wmc.4
for <bitcoin-dev@lists.linuxfoundation.org>;
Wed, 20 Oct 2021 12:43:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=degreesofzero-com.20210112.gappssmtp.com; s=20210112;
h=subject:to:references:from:message-id:date:user-agent:mime-version
:in-reply-to:content-transfer-encoding:content-language;
bh=LYLY/qNUDtHi8mPZfKmxBuuSgfN6BC8gD3Nsg4LZUOc=;
b=o5lMsp7LEiKRnzhi2ADeuQbNAD1CxZRBDQf2328+zsCCOeEcORglOo5W4Nvp6Odv1N
+Wt5FbuYu5aiYkKYnb6c6iRbic0+NmplrVsgcSAxLAumUQeeTedcxXbJI7NI1Ea0BxAt
GPA4jXpbkEfFiBUOUT6ZLuR0ruvy7zfKS78K0b11sH9PxIwvCZHqPsv1OF6Jvzeg/vCO
X639KVal5X8rDhK7o70SfhDI0yoOsJ3dD8z5h+wJWikXuD2w1IvPRAb608wZSj6TyG0r
sO0J+E4dgXf8MTfQaeH4Xqx+CaY7+R/nS+2/KPuhXkzGSQTOUx91hVxnvXXDlO2eFlZp
bkXw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:subject:to:references:from:message-id:date
:user-agent:mime-version:in-reply-to:content-transfer-encoding
:content-language;
bh=LYLY/qNUDtHi8mPZfKmxBuuSgfN6BC8gD3Nsg4LZUOc=;
b=VEMXSyJlMVkrUKOxFNpI2rYOSh4rT9sEjZBHq2uIRG+XNUoawuA49KxZoK53/7vntV
Uj/ZmOTaA8AQPhL0ZUHFuPnK40WTYyqfHQMKFux3WgisThFie6HH3r+4JeeDCoMxvy+r
cGPwlJQ2ajN4KmxeWt6wsQ3xsLPuWnzr9QIixiCE666a+Jk7hbu7MWOn8bDMtiNQy1r7
qzLU25ZMC1YQzt7kBKKtC5vvCeY3K51YJMzOan5NpECO/nhdKWpOIEqCaaw4OsdB4Y7g
iBKI1MvKBvXaVRyX2VhO2+gKIULwzH+RNiXx/E86Lf4y9Nj2NWnpMJHsA6OxsauWvksP
3Hcg==
X-Gm-Message-State: AOAM532ueZx9IusquPE+5x2m/a3L4n5/douFSB6/LMnuRzX4dd3LixSS
7pfJTopc37gLxHLsOxNIGsRSPeCA1lgmtM+/
X-Google-Smtp-Source: ABdhPJxUpevma21krLiqwDq9scRwuDoV3BsrdOa2BMCKbkrqVETSTdhfFa8oU8zoPstmkHDLJ3ROJA==
X-Received: by 2002:a1c:3b44:: with SMTP id i65mr1377022wma.161.1634759009723;
Wed, 20 Oct 2021 12:43:29 -0700 (PDT)
Received: from [192.168.68.108] (247.red-83-46-216.dynamicip.rima-tde.net.
[83.46.216.247])
by smtp.gmail.com with ESMTPSA id o6sm6289453wms.3.2021.10.20.12.43.28
for <bitcoin-dev@lists.linuxfoundation.org>
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Wed, 20 Oct 2021 12:43:29 -0700 (PDT)
To: bitcoin-dev@lists.linuxfoundation.org
References: <MmT9umZ--3-2@tutanota.de>
<20211020192054.GA117785@jauntyelephant.191.37.198.vultr.com>
From: Charles Hill <chill@degreesofzero.com>
Message-ID: <7c2d608c-bd59-b04e-a9a5-a55098782700@degreesofzero.com>
Date: Wed, 20 Oct 2021 20:43:27 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
Thunderbird/78.13.0
MIME-Version: 1.0
In-Reply-To: <20211020192054.GA117785@jauntyelephant.191.37.198.vultr.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Content-Language: en-US
X-Mailman-Approved-At: Wed, 20 Oct 2021 22:14:08 +0000
Subject: Re: [bitcoin-dev] bitcoin.org missing bitcoin core version 22.0
X-BeenThere: bitcoin-dev@lists.linuxfoundation.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Bitcoin Protocol Discussion <bitcoin-dev.lists.linuxfoundation.org>
List-Unsubscribe: <https://lists.linuxfoundation.org/mailman/options/bitcoin-dev>,
<mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=unsubscribe>
List-Archive: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/>
List-Post: <mailto:bitcoin-dev@lists.linuxfoundation.org>
List-Help: <mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=help>
List-Subscribe: <https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev>,
<mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Oct 2021 19:43:33 -0000
Hello, Owen,
The GPG signature verification has changed for bitcoin core version 22
and later. There were two main changes:
1) The sha256 checksums are now in a separate file from the GPG
signatures. So download a new file named "SHA256SUMS" (contains the
checksums) and also the "SHA256SUMS.asc" which contains the signatures.
2) The signature file now contains multiple signatures. These signatures
are generated by multiple "builders" who have provided their own public
keys to verify against. Not all builders will provide a signature for
each release.
You can find more information at bitcoincore.org/en/download/ [1] under
the "Linux verification instructions" section - click to expand.
Instructions about where to find and how to import the full list of
"builder" public keys can be found in the bitcoin core github repo [2].
> I also notice that, as of 22.0, Wladimir is no longer signing the
releases, and I have no trust in my gpg network of the people who seem
to have replaced him.
The list of "builder" public keys includes many long-time bitcoin core
contributors as well as Wladimir's. Caution is always warranted but
please do not spread unnecessary FUD.
- chill
[1] https://bitcoincore.org/en/download/
[2] https://github.com/bitcoin/bitcoin/tree/master/contrib/builder-keys
On 10/20/21 8:20 PM, Owen Gunden via bitcoin-dev wrote:
> On Wed, Oct 20, 2021 at 04:47:17PM +0200, Prayank wrote:
>>> It seems confusing to have two sites that seemingly both represent
>>> bitcoin core.
>> There is only one website which represents Bitcoin Core full node
>> implementation. You can download Bitcoin Core from
>> https://bitcoincore.org
> I also notice that, as of 22.0, Wladimir is no longer signing the
> releases, and I have no trust in my gpg network of the people who seem
> to have replaced him.
>
> Given the level of security at stake here, my eyebrows are raised at
> this combination of items changing (new website + new gpg signers at the
> same time).
>
> _______________________________________________
> bitcoin-dev mailing list
> bitcoin-dev@lists.linuxfoundation.org
> https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
|
