any chance we can have the PGP files on the FTP sever too, like openssl does (http://www.openssl.org/source/)? if there were a corresponding .md5/.sha1/.asc file, i'd modify Android's tzdata updating script to actually check the signatures. at the moment, with the signature only available in the release mail, it's not obvious how i'd automate this. On Wed, Oct 17, 2012 at 9:39 PM, Paul Eggert <eggert@cs.ucla.edu> wrote:

The 2012g release of the tz code and data is available. It reflects the following changes recently circulated on the tz mailing list:

Samoa fall 2012 and later. (Thanks to Nicholas Pereira and Robert Elz.)

Palestine fall 2012. (Thanks to Steffen Thorsen.)

Assume C89.

This release does not reflect the possible changes discussed yesterday for Tocantins and Bahia; I plan to send out further email about that soon. Nor does it include the minor C style-code change for NULL versus 0 -- I plan to get to that the next time around, since it doesn't affect functionality.

To attack the version-number problem, this release ships the file 'Makefile' (which contains the release number) in both the tzcode and the tzdata tarballs. The two Makefiles are identical, and should be identical in any matching pair of tarballs, so it shouldn't matter which order you extract the tarballs. Perhaps we can come up with a better version-number scheme at some point; this scheme does have the virtue of not adding more files.

Here are links to the release files:

http://www.iana.org/time-zones/repository/releases/tzcode2012g.tar.gz http://www.iana.org/time-zones/repository/releases/tzdata2012g.tar.gz

ftp://ftp.iana.org/tz/releases/tzcode2012g.tar.gz ftp://ftp.iana.org/tz/releases/tzdata2012g.tar.gz

As usual, links to the latest release files are here:

http://www.iana.org/time-zones/repository/tzcode-latest.tar.gz http://www.iana.org/time-zones/repository/tzdata-latest.tar.gz

ftp://ftp.iana.org/tz/tzcode-latest.tar.gz ftp://ftp.iana.org/tz/tzdata-latest.tar.gz

This release corresponds to commit ec6a124c84ef45054c84cbe49ee8ebe27473c01c in the unofficial github repository at <https://github.com/eggert/tz>.

Here is the GPG checksum for the release files:

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux)

iQIcBAABAgAGBQJQf4M1AAoJEO2X6Q5iqn40cgoP/2gNWNwj4ZSXadowHbjoA9QT 8gqjdw5vXYbIczBei0uwuG5X/yvgiSk57DCbR2XOa7IwPkIom0HbJpL0FYPB8I5D cMdr7IYbksGXnnVn9mbtiTM06IJRxIU/d6O3c/2yHgv5yJp8JMj4dr746iI4EVGZ osA1FDefsCpIaE8/axToY83uLaroTKjHAqucQoQ/+5htTTcfoEM/MNX7ZcLS7uxl alHUNWH2KCxHiYC3HBL04B+dHdY3K3HaOR57TwDbzHSnjcBwa45jaDGBo9fV/0aZ cpbisJ+5O/IYl4uwUTYpFPrfcy95KxdxaIp/K167uDbc/Nb+rUOY9BjdqGjVyGHt V749gV1tO4jnzJMUF+sIuvhCDME802NOs2yOnMTltKLNDfivouT8PAxAEF4ozFlJ gBUtKfWMb2teQpDp64K4bQAZOUFEjW1KuETIPD9oq7tNx2Ohp9QGl08pKxA66OaD 8GiBqmjA/NzM7xmZqWSMqu6GSrSQnA5PDMZM/B4m79cVYzYoGi7FBLq3hBEKCXKG y3TWNnVjRXVamHh4cWY3i+1fC+se+DobR/dt/l1abtJ/HdnxNcQQc57eB97yAvQI Xg7u0Hhf6uqJkGohoyA7CWpr1ArEszBIfgQ4niCTa5anT5KrrQly9Imkt1i+9pdi SFh0tDFyzyL0Fhcc0VvY =+Nmz -----END PGP SIGNATURE----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux)

iQIcBAABAgAGBQJQf4NJAAoJEO2X6Q5iqn4007sP/R1bciDNZ1CbkCNT4EMVaK8E PLhql3SsNZrPJYZHm5Ph03uG8YvlY1ysHgSQn9dz/MNQ8eO3oBno06To/1Tn34Rh W6J0Iyrw9EOuCykke0oF/EmUh2T89DFJUzKbg+3x5UZ8QM+mhHHCL+5wSEm8aY9m zmleAyhwdh+4kgUvVT6f3IisWY2FCOufQZ7oJx8g1QHuPy1lBI8jLqHbUNWvR0CD PyAvhEUPGRDfWUM7jkPpN8tK4LE4PAM0OH3lXhOct221heQ05AFr5+N8i+B3z2lR K0JCeF2QtDtXnkYTKIUMGfXoA7KXTVkAO3gSjcPTusSF6WByLIhiP7I025x9Aglq BGwy1NxVbdiEv51ibiR9VZs28zqxdTnxKoL6cwkmbWApk6XyG/aCZQXjN+92Mtv0 eXRgIHeWzlOE7/b7SHi06iU9p23qR9AQNRpFwZqZHCK/tnn1kl6zl+WKjrM6ZhOO 1WvN1slat57p790+ekld1TbAEU3pto5QZekOMwOdV/5+w3Q09J83AzfNZEeKZS4F GE/RWo6+nCrFUNBMJkx0uOMwcIWW3lK9FEknrfT/Z27XkDKDRL4j5RdWs+juk2Oq z3fUJMqb0TRgIgWl1RIsvWCiAXI4XAojD2Qx3zYr4smhcV/rEZ4NiPLoh/lLY6j2 tuePXzMqu3pQ16Uc/d9h =8M0s -----END PGP SIGNATURE-----

-- Elliott Hughes - http://who/enh - http://jessies.org/~enh/ NIO, JNI, or bionic questions? Mail me/drop by/add me as a reviewer.