Simon Josefsson

I have the same issue with OpenCV 3.4.2 on Replicant 6 and with Open Note Scanner 1.0.30 from fdroid. Crash log below if it helps. OpenCV 3.1.0 works fine. ```...

+1 to focus on autoconf which is the most flexible/portable. I agree multiple build systems costs more than it gives back to the project.

Ah that sounds good -- I suppose then indeed that documentation how to do is what I'm missing. I'm using GitLab and the project I'm thinking of is `debdistget` that...

The relevant apt-signer OpenPGP keys I am uploading signed artifacts for are here: https://gitlab.com/debdistutils/debdistcanary/-/tree/main/openpgp I had to use `gpg --export-options export-minimal` on them to have canonical versions in rekor --...

Yes I think you do support V4 signature. The output above was to prove that the keys were OpenPGP v4, however what is also relevant is the signatures, and they...

I think #1170 is another example of not canonicalizing the public keys received when uploading. Generally, rather than taking the public keys or certificates and store them verbatim, I think...

I ran into another problem where rekor refused an upload where the public key sent had a /signature/ from an Ed25519 key. I believe the solution here should be: 1)...

There is a corner-case: what if the artifact was signed by many signers, but the provided public key file did not contain all public keys for those signatures. I think...

Thanks, let's fix that when we convert the documentation from the wiki to asciidoc files.

We agree it should be fixed, and are happy to review patches.