diff options
| author | Scott <scott@paragonie.com> | 2016-02-05 22:52:05 -0500 |
|---|---|---|
| committer | Scott <scott@paragonie.com> | 2016-02-05 22:52:05 -0500 |
| commit | b0e69d10852716b2ccbdff69c75c477637220790 (patch) | |
| tree | 9be5a29fde6738377b5651a3258d3893b91d7287 | |
| parent | 4c195e5ff75109027729a7ea275d681622301ee3 (diff) | |
| download | random_compat-b0e69d10852716b2ccbdff69c75c477637220790.zip random_compat-b0e69d10852716b2ccbdff69c75c477637220790.tar.gz random_compat-b0e69d10852716b2ccbdff69c75c477637220790.tar.bz2 | |
Prepare 1.2.0 release, upgrade to ECDSA keypair over secp384r1v1.2.0
| -rw-r--r-- | CHANGELOG.md | 7 | ||||
| -rw-r--r-- | README.md | 15 | ||||
| -rw-r--r-- | dist/random_compat.phar.pubkey | 10 | ||||
| -rw-r--r-- | dist/random_compat.phar.pubkey.asc | 11 |
4 files changed, 34 insertions, 9 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 6edcfe8..f5f1927 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,7 +1,12 @@ -### Unreleased +### Version 1.2.0 - 2015-02-05 * Whitespace and other cosmetic changes * Added a changelog. +* We now ship with a command line utility to build a PHP Archive from the + command line. + + Every time we publish a new release, we will also upload a .phar + to Github. Our public key is signed by our GPG key. ### Version 1.1.6 - 2015-01-29 @@ -34,7 +34,20 @@ to a newer version of PHP immediately. composer require paragonie/random_compat -**Manually:** +**Signed PHP Archive:** + +As of version 1.2.0, we also ship an ECDSA-signed PHP Archive with each stable +release on Github. + +1. Download [the `.phar`, `.phar.pubkey`, and `.phar.pubkey.asc`](https://github.com/paragonie/random_compat/releases/latest) files. +2. (**Recommended** but not required) Verify the PGP signature of `.phar.pubkey` + (contained within the `.asc` file) using the [PGP public key for Paragon Initiative Enterprises](https://paragonie.com/static/gpg-public-key.txt). +3. Extract both `.phar` and `.phar.pubkey` files to the same directory. +4. `require_once "/path/to/random_compat.phar";` +5. When a new version is released, you only need to replace the `.phar` file; + the `.pubkey` will not change (unless our signing key is ever compromised). + +**Manual Installation:** 1. Download [a stable release](https://github.com/paragonie/random_compat/releases/latest). 2. Extract the files into your project. diff --git a/dist/random_compat.phar.pubkey b/dist/random_compat.phar.pubkey index 57a547a..eb50ebf 100644 --- a/dist/random_compat.phar.pubkey +++ b/dist/random_compat.phar.pubkey @@ -1,9 +1,5 @@ -----BEGIN PUBLIC KEY----- -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56Ododgbfwfg+QAxOPex -HtofrcX6DR6wOJ9H1E7LZiOWWBe1pR85oqBbWYC/0r858/KeMnVj6cH0KQ+FAWxE -VqKuX5oyl1u2fTKTMI0KIBXMu1CxWHKbZBHEtur8zEgoPyhMzOxCbKDtcfHLuKTK -pWBAsakH0LY6vVzJXqsLjsKJt65CeNlDAs8PhYnrX69bgb6M5u30fdTjhnBKeEJf -lKx9YIrYN3fwUvIxw93g+4mQQKOzg4nPvjVXabhUdBLi/X8eJLVSCbp7/Lisj/Uj -kzNBfYsd4b9vZnGsRVW4m3/+tyRSAEY3atio1KfoYKnqb2aPdfLxaKc03xK2JyaU -iQIDAQAB +MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEEd+wCqJDrx5B4OldM0dQE0ZMX+lx1ZWm +pui0SUqD4G29L3NGsz9UhJ/0HjBdbnkhIK5xviT0X5vtjacF6ajgcCArbTB+ds+p ++h7Q084NuSuIpNb6YPfoUFgC/CL9kAoc -----END PUBLIC KEY----- diff --git a/dist/random_compat.phar.pubkey.asc b/dist/random_compat.phar.pubkey.asc new file mode 100644 index 0000000..6a1d7f3 --- /dev/null +++ b/dist/random_compat.phar.pubkey.asc @@ -0,0 +1,11 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.0.22 (MingW32) + +iQEcBAABAgAGBQJWtW1hAAoJEGuXocKCZATaJf0H+wbZGgskK1dcRTsuVJl9IWip +QwGw/qIKI280SD6/ckoUMxKDCJiFuPR14zmqnS36k7N5UNPnpdTJTS8T11jttSpg +1LCmgpbEIpgaTah+cELDqFCav99fS+bEiAL5lWDAHBTE/XPjGVCqeehyPYref4IW +NDBIEsvnHPHPLsn6X5jq4+Yj5oUixgxaMPiR+bcO4Sh+RzOVB6i2D0upWfRXBFXA +NNnsg9/zjvoC7ZW73y9uSH+dPJTt/Vgfeiv52/v41XliyzbUyLalf02GNPY+9goV +JHG1ulEEBJOCiUD9cE1PUIJwHA/HqyhHIvV350YoEFiHl8iSwm7SiZu5kPjaq74= +=B6+8 +-----END PGP SIGNATURE----- |