On 2014-05-14, Marc Espie <es...@nerim.net> wrote:
> On Tue, May 13, 2014 at 06:42:53PM +0000, Alexej wrote:
>> Greetings gentlemen,
>>
>> Downloaded and installed install55.iso, SHA256 was verified successfuly.
>>
>> Downloaded firefox-26.0p1.tgz from Canada (Alberta) mirror site along with
>> SHA256 files.
>>
>> /pub/OpenBSD/5.5/packages/amd64/SHA256
>> /pub/OpenBSD/5.5/packages/amd64/SHA256.sig
>> /pub/OpenBSD/5.5/packages/amd64/firefox-26.0p1.tgz
>>
>> Then performed a check and got a result:
>>
>> Signature Verified
>> firefox-26.0p1.tgz: FAIL
When reporting such a problem, please include the command you have run...
This problem excepted (which I think is with pkg_sign -C), there's something
wrong going on with signify -C; check out the timings:
$ \time -l signify -C -p /etc/signify/openbsd-55-pkg.pub -x SHA256.sig
moo-1.3p1.tgz
Signature Verified
moo-1.3p1.tgz: FAIL
65.83 real 31.48 user 34.32 sys
40304 maximum resident set size
0 average shared memory size
0 average unshared data size
0 average unshared stack size
11571228 minor page faults
0 major page faults
0 swaps
0 block input operations
0 block output operations
0 messages sent
0 messages received
0 signals received
235 voluntary context switches
122 involuntary context switches
"signature verified" is returned immediately, FAIL takes a whole minute.
$ \time -l sha256 -C SHA256.sig moo-1.3p1.tgz
(SHA256) moo-1.3p1.tgz: OK
0.00 real 0.01 user 0.00 sys
588 maximum resident set size
0 average shared memory size
0 average unshared data size
0 average unshared stack size
273 minor page faults
0 major page faults
0 swaps
0 block input operations
0 block output operations
0 messages sent
0 messages received
0 signals received
0 voluntary context switches
0 involuntary context switches
