On Wed, Dec 15, 2004 at 01:06:36PM -0000, Orton, Yves wrote: > Primary key fingerprint: B484 04B8 E9D5 93A2 5CA8 F1AA 4F82 E2DC 2C3F > 3F34 > ==> SKIPPED CHECKING 'Makefile'! (run Makefile.PL to ensure its integrity) > <===
Ok, talked to Autrijus. <Schwern> But what's that "SKIPPED CHECKING" thing? <autrijus> it means that there is a Makefile <Schwern> umm <autrijus> which could be cracker-generated <autrijus> say a cracker get hold of your tarball Apparently it only shows up if the signature test fails. > Not in MANIFEST: pmfiles.dat > ==> MISMATCHED content between MANIFEST and distribution files! <== Ok, old versions of MakeMaker on Win32 (6.06, Dec 2002, and back) generate a pmfiles.dat. The MANIFEST.SKIP back then didn't take that into account. Autrijus is hacking up Module::Signature to account for that. -- Michael G Schwern [EMAIL PROTECTED] http://www.pobox.com/~schwern/ Mines are equal opportunity weapons.