From owner-svn-ports-all@freebsd.org Thu May 4 14:06:26 2017 Return-Path: Delivered-To: svn-ports-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B6D8CD5CCA0; Thu, 4 May 2017 14:06:26 +0000 (UTC) (envelope-from mat@FreeBSD.org) Received: from prod2.absolight.net (mx3.absolight.net [IPv6:2a01:678:2:100::25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "plouf.absolight.net", Issuer "CAcert Class 3 Root" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 7CB371027; Thu, 4 May 2017 14:06:26 +0000 (UTC) (envelope-from mat@FreeBSD.org) Received: from prod2.absolight.net (localhost [127.0.0.1]) by prod2.absolight.net (Postfix) with ESMTP id 2015EBDC91; Thu, 4 May 2017 16:06:24 +0200 (CEST) Received: from ogg.in.absolight.net (ogg.in.absolight.net [79.143.241.239]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by prod2.absolight.net (Postfix) with ESMTPSA id E599FBDC89; Thu, 4 May 2017 16:06:23 +0200 (CEST) Subject: Re: svn commit: r440074 - in head/www/owncloud: . files To: Kevin Lo , ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org References: <201705040047.v440lVaM060931@repo.freebsd.org> From: Mathieu Arnold Organization: Absolight / The FreeBSD Foundation Message-ID: <412a4d2d-2d22-aa2a-000b-3ce4ae55d4b2@FreeBSD.org> Date: Thu, 4 May 2017 16:06:21 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:52.0) Gecko/20100101 Thunderbird/52.1.0 MIME-Version: 1.0 In-Reply-To: <201705040047.v440lVaM060931@repo.freebsd.org> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="lWn5SI0HaQKlNQPpqPONPcU3q9efAFDG2" X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 May 2017 14:06:26 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --lWn5SI0HaQKlNQPpqPONPcU3q9efAFDG2 Content-Type: multipart/mixed; boundary="fkBR4EvQAj88fUBv8sJi95kfxSgGqKD8b"; protected-headers="v1" From: Mathieu Arnold To: Kevin Lo , ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Message-ID: <412a4d2d-2d22-aa2a-000b-3ce4ae55d4b2@FreeBSD.org> Subject: Re: svn commit: r440074 - in head/www/owncloud: . files References: <201705040047.v440lVaM060931@repo.freebsd.org> In-Reply-To: <201705040047.v440lVaM060931@repo.freebsd.org> --fkBR4EvQAj88fUBv8sJi95kfxSgGqKD8b Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: fr Le 04/05/2017 =C3=A0 02:47, Kevin Lo a =C3=A9crit : > Author: kevlo > Date: Thu May 4 00:47:31 2017 > New Revision: 440074 > URL: https://svnweb.freebsd.org/changeset/ports/440074 > > Log: > Remove files/patch-apps_user__external_lib_smb.php. There is a good chance this breaks using the smb bits of OwnCloud. > Owncloud-10.* verifies > Owncloud-10.x verifies each installed file using signature and report= s file > integrity error. This is not exactly true. It does not check signatures, it checks sha512 hashes, all one would need is also patch the signature.json file with the correct hash. --=20 Mathieu Arnold --fkBR4EvQAj88fUBv8sJi95kfxSgGqKD8b-- --lWn5SI0HaQKlNQPpqPONPcU3q9efAFDG2 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQJ8BAEBCgBmBQJZCzVfXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQzQUI2OTc4OUQyRUQxMjEwNjQ0MEJBNUIz QTQ1MTZGMzUxODNDRTQ4AAoJEDpFFvNRg85InJUP/i/24VpE8YbvQ6pDJLty11lU bcd1gmQ9sHiHdmQfup7QjQpJ7tQTlPxduvyxJc9ZBzbvSpUU3MyoDsWaIp4P+s5g K5e26HgslLHFq1S6DKHDcUx2GSiJsTmhnIEThT0mONmVyDp66Vm0nZx+kPzOnsn0 bfTGDe38t/NyP1W+oo7PQcTr81p6C5m3cHMrDXlGv9ebqhx6ar7Umn5DJClWGRO4 ohc6V9Bt9q6oVchN5ivfxlDoMlQIc+/KW5CC9x6NKXJeI26HYi8iIoU3/1basKfz 1T0JqER1sx+ifaxK7KpIQdF8JGDYcxABn4I3fgkVVCm2dK8NAfhq8HFLHD+6xrHM InFep7rEE6v6W6iKrjJtnnUwBoLQgsZPkJ9L8lDOz6vdcYi4EBPelrICPiSB8Ktr odIVC9vIa22G0aZb1KDGPScfTWTbws6guRrYbCpL3YXFsqmy7ASIPpbIjAjx6xgc bix2hUJBrHc9MIhm5BA0TETDLjKae/LyVtL0HFKJGi2Pe65XBMAPB+T/OjQF+W1S BL+MvlekeXWwb5ljZvyytTuCbG5x58d/9fs7vsNFABRHIfVXJwAKSKvOD4HZWRS+ LAuwL0hwIMjFohBrGrXtFSgDgmBV2Rq9EBFFtt/OSj/kLK2g00NbU50sgXONQrof nlh9AKj3I7N2c1QW0+Ik =HAlr -----END PGP SIGNATURE----- --lWn5SI0HaQKlNQPpqPONPcU3q9efAFDG2--