[tor-bugs] #28584 [Metrics]: Give up on signing jars

[Tor Bug Tracker & Wiki]

#28584: Give up on signing jars
-------------------------+-----------------------------
 Reporter:  karsten      |          Owner:  karsten
     Type:  enhancement  |         Status:  merge_ready
 Priority:  Medium       |      Milestone:
Component:  Metrics      |        Version:
 Severity:  Normal       |     Resolution:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
 Reviewer:               |        Sponsor:
-------------------------+-----------------------------
Changes (by irl):

 * status:  needs_review => merge_ready


Comment:

 Looks good. For multiple signatures, we should do these by building
 ourselves and then just having the detached signatures merged. If we've
 messed up reproducible builds anywhere then we'll find out this way. It
 may be that our tarballs have timestamps in there (I think this is likely)
 so we should figure out how to resolve that.

 Let's make this change first then we can run things through diffoscope a
 few times to see what else is left to do.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28584#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online