GPG file in the HEAD repository

Sheldon · Post by **Sheldon** » 16 Apr 2017, 17:18

Hi,

currently I only see a GPG file in the HEAD repository.
Will you continue providing the plane jar as before?

Otherwise GPG is not very easy to handle on a Windows machine.
Do i need a key?

Kind regards,

Sheldon

Post by **rednoah** » 16 Apr 2017, 17:30

The HEAD jar is used for unattended updates by alot of people these days. It's now digitally signed with GnuPG for security reasons. You can use this public key to verify that the package has been uploaded by me and that is has not been modified by a 3rd party.

Sheldon · Post by **Sheldon** » 16 Apr 2017, 22:08

I understand but if I try to decrypt the current gpg file using gpg4win it tells me that there is no data.

Post by **rednoah** » 17 Apr 2017, 02:07

Works fine with the gpg.exe command-line tool as far as I can tell. Maybe there's a bug in the software you're using.

0. Fetch public key (only required once):

Code: Select all

gpg --recv-keys 4E402EBF7C3C6A71

1. Verify signature and extract signed data:

Code: Select all

gpg --trusted-key 4E402EBF7C3C6A71 --output FileBot.jar.xz --decrypt FileBot.jar.xz.gpg

2. Unpack data:

Code: Select all

xz --decompress FileBot.jar.xz

If you use Windows Bash then update-filebot.sh should work out of the box. If you're stuck with CMD then you can make your own little script with the commands above. Since I update the jar every other day, automating the processing of updating the jar is probably a good idea.

Sheldon · Post by **Sheldon** » 17 Apr 2017, 06:34

Thanks! Please provide a download link to the command line tool gpg.exe you are using. Google didn't find it!

Post by **rednoah** » 17 Apr 2017, 06:36

1.
It's on the official site. It's the second download for Windows:
https://www.gnupg.org/ftp/gcrypt/binary ... 170403.exe

@see https://www.gnupg.org/download/index.en.html

2.
xz binaries for Windows are here:
http://tukaani.org/xz/xz-5.2.3-windows.7z

@see http://tukaani.org/xz/

Sheldon · Post by **Sheldon** » 17 Apr 2017, 07:56

That works fine! Thanks for your help!

Sheldon · Post by **Sheldon** » 17 Apr 2017, 14:36

Will the url remain like this

Code: Select all

https://sourceforge.net/projects/filebot/files/filebot/HEAD/FileBot.jar.xz.gpg/download

without the version in the jar?
Without the version it is easier to automize.

Post by **rednoah** » 17 Apr 2017, 15:35

Yep. That's pretty much how update-filebot.sh works.

Sheldon · Post by **Sheldon** » 17 Apr 2017, 15:39

Great! Thanks!

Chryses · Post by **Chryses** » 17 Apr 2017, 18:34

Wow. Sorry if I jump to this thread.

I always update the FileBot head with a custom script, today I tried to update FileBot because the cleaner script don't works anymore and if I understand the situation, I need to keep update FileBot.

So I discovered this thread and the link for the update-filebot.sh, I downloaded it and the maintainer.pub, put both in the FileBot directory and launched the sh file, but I've some error

Code: Select all

[~] # sh /share/CACHEDEV1_DATA/.qpkg/Entware-ng/share/filebot/update-filebot.sh
/share/CACHEDEV1_DATA/.qpkg/Entware-ng/share/filebot/FileBot.jar.xz.gpg: No such file or directory
Update /share/CACHEDEV1_DATA/.qpkg/Entware-ng/share/filebot/FileBot.jar.xz.gpg
Warning: Illegal date format for -z, --timecond (and not a file name).
Warning: Disabling time condition. See curl_getdate(3) for valid date syntax.
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0 15547    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0   357    0     0    0     0      0      0 --:--:--  0:00:01 --:--:--     0
  0   439    0     0    0     0      0      0 --:--:--  0:00:02 --:--:--     0
  0   353    0     0    0     0      0      0 --:--:--  0:00:02 --:--:--     0
100 17.7M  100 17.7M    0     0  2902k      0  0:00:06  0:00:06 --:--:-- 5672k
/share/CACHEDEV1_DATA/.qpkg/Entware-ng/share/filebot/FileBot.jar.xz.gpg [d71088da176c5aaf3e314e4d6309bf07]
gpg: keyring `/share/CACHEDEV1_DATA/.qpkg/Entware-ng/share/filebot/data/.gpg/secring.gpg' created
gpg: keyring `/share/CACHEDEV1_DATA/.qpkg/Entware-ng/share/filebot/data/.gpg/pubring.gpg' created
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0
gpg: Signature made Sun 16 Apr 2017 07:11:50 PM CEST using RSA key ID 7C3C6A71
gpg: Can't check signature: public key not found

and at the end I've the FileBot.jar.xz file

Any idea?

Post by **rednoah** » 17 Apr 2017, 19:48

1.
Console output says that it failed to import the public key:

Code: Select all

gpg: no valid OpenPGP data found.
gpg: Total number processed: 0

Looks like this line doesn't work for some reason:

Code: Select all

gpg --homedir "$GPG_HOME" --import "$APP_ROOT/maintainer.pub"

@see https://github.com/filebot/filebot/blob ... bot.sh#L62

2.
If you want to update to the latest stable release, then you can just do this:

Code: Select all

cd /path/to/filebot
curl https://raw.githubusercontent.com/filebot/plugins/master/installer/portable.sh | sh -xu

I recommend always using the latest stable release. The latest revision (that this thread is all about) may not always be stable and sometimes may not work at all.

Chryses · Post by **Chryses** » 20 Apr 2017, 11:31

Tnx like always.

Btw, your excellent file, is made for "normal" linux, I use a qnap with entware, so I installed the coreutils-sha256sum.

I think the sha approach to check first if there's a new version is the best! Do you think is possible to use this way on this? https://raw.githubusercontent.com/fileb ... ortable.sh

Post by **rednoah** » 20 Apr 2017, 14:26

The SHA256 is used to verify portable package to make sure that it hasn't been tampered with. Future releases will use GPG signatures as well.

Chryses · Post by **Chryses** » 21 Apr 2017, 10:52

I mean this

Code: Select all

if [ "$PACKAGE_HASH" == "$PACKAGE_HASH_EXPECTED" ]; then
	echo "$PACKAGE_FILE [$PACKAGE_HASH]"
	exit 0
fi

Is a very good idea to prevent to download each time the whole file!

So in future also the latest stable release will use GPG?

Post by **rednoah** » 21 Apr 2017, 13:18

1.
The hash was primarily used to make sure that the data received from the untrusted mirror wasn't tampered with, but still gave ultimate trust to SourceForge. This problem has been fixed with GPG signatures which give ultimate trust to nobody but me.

2.
Yes, GPG signatures will be used for all files, except maybe for the packages where sha256 digests are known and verified by the package manager (i.e. synology and brew cask packages).

viking · Post by **viking** » 22 Apr 2017, 04:57

Sorry for my ignorance....I am quite lost.

I am on Windows and I use the portable version.
In the past, I have just downloaded the jar (e.g. filebot-r4991.jar.xz) and replaced the old jar file.
How do I update on windows now without having to download extra programs?

Do I use "update-filebot.sh"? What is this and how do I use it?

Post by **rednoah** » 22 Apr 2017, 05:50

Does installing the Windows subsystem for Linux count as downloading extra programs?

You will need a program they can verify gpg signatures and a program that can decompress xz archives. On Windows, neither is installed by default. On Linux, including WSL, it'll work out of the box.

viking · Post by **viking** » 22 Apr 2017, 08:31

I have a program that can decompress the archives (Winrar). That is how I did it before the gpg was added.
Now I can't just unrar anymore...

I didn't understand your comment about Linux. Do I need to use Linux to use "update-filebot.sh"? Can I use it with Windows directly? What is "update-filebot.sh" and how do I use it?

Post by **rednoah** » 22 Apr 2017, 09:31

Option A: Use gpg.exe and xz.exe

You just need gpg.exe and xz.exe to verify and unpack the jar.

Option B: Use WSL

If you want to use update-filebot.sh then you need the Windows Subsystem for Linux.

I'm sure there's GUI tools that can deal with gpg and xz files. I'd automate the process with the curl, gpg and xz commands though.

MindTooth · Post by **MindTooth** » 22 Apr 2017, 09:53

Code: Select all

○ → ./update-filebot.sh
./update-filebot.sh: 38: [: 970ab82154b44551c2510e4c0ec42e70: unexpected operator
Update /home/mt/filebot/FileBot.jar.xz.gpg
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0   370    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0 15534    0     0    0     0      0      0 --:--:--  0:00:01 --:--:--     0
  0   429    0     0    0     0      0      0 --:--:--  0:00:02 --:--:--     0
  0   343    0     0    0     0      0      0 --:--:--  0:00:02 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:03 --:--:--     0
/home/mt/filebot/FileBot.jar.xz.gpg [970ab82154b44551c2510e4c0ec42e70]
gpg: Problem reading source (2111675 bytes remaining)
gpg: handle plaintext failed: file read error

Can't seem to pull a working copy. Also, some script error. This is on OpenMediaVault 3.0 (Debian Jessie I believe).

Ed1t: Worked fine to decrypt yesterdays r5040 release, I guess this is the new r5041 you talked about?

Sheldon · Post by **Sheldon** » 22 Apr 2017, 12:26

The current xz file can't be decompressed using XZ Utils
Yesterday's file worked fine. Please check!

Post by **rednoah** » 22 Apr 2017, 14:04

File size looks off. I guess the file wasn't uploaded completely.

Sheldon · Post by **Sheldon** » 22 Apr 2017, 14:46

Now it works fine! Thanks!

viking · Post by **viking** » 22 Apr 2017, 16:53

rednoah wrote:
Option B: Use WSL

If you want to use update-filebot.sh then you need the Windows Subsystem for Linux.

I'm sure there's GUI tools that can deal with gpg and xz files. I'd automate the process with the curl, gpg and xz commands though.

The link above takes me to Bash On Windows, However, I need to run Windows 10 but I run Windows 7. Thus not an option for me

(There is no help section on this forum for Windows 7 users)

Sheldon · Post by **Sheldon** » 22 Apr 2017, 18:05

I followed the initial approach using XZ Utils and GnuGP combined with a batch holding the provided commands from above. That works fine

If I got you right you work in a portable enviroment like me. XZ as a binary is portable as well as GnuGP. After installing GnuGP once you can copy the app folder to a location of your choice and uninstall GnuGP. This is a common practice for many portable apps not following the PortableApps.com standard approach.

viking · Post by **viking** » 22 Apr 2017, 21:58

Sheldon wrote:I followed the initial approach using XZ Utils and GnuGP combined with a batch holding the provided commands from above. That works fine

If I got you right you work in a portable enviroment like me. XZ as a binary is portable as well as GnuGP. After installing GnuGP once you can copy the app folder to a location of your choice and uninstall GnuGP. This is a common practice for many portable apps not following the PortableApps.com standard approach.

I had actually installed GPG4Win a few years ago and that apparently also installed GnuGP. I ran the command

Code: Select all

gpg --trusted-key 4E402EBF7C3C6A71 --output FileBot.jar.xz --decrypt FileBot.jar.xz.gpg

followed by extraction with WinRar and got the filebot.jar

BTW, how can I find out the version number of the filebot.jar ?

Sheldon · Post by **Sheldon** » 22 Apr 2017, 22:13

Instead of installing GPG4win I use this.

To find out the JAR version you can use the corresponding CLI command.

Code: Select all

filebot -version

But I would recommend to get the sysinfo using the sysinfo script with the CLI.

Code: Select all

filebot -script "sysinfo"

Leokosta · Post by **Leokosta** » 23 Apr 2017, 00:47

Hello, Viking ... Try using 7zip to extract the file. I got some errors, but in the end I could replace the .jar file, and Filebot seemes to be working fine.

viking · Post by **viking** » 23 Apr 2017, 00:55

Sheldon wrote:Instead of installing GPG4win I use this.

To find out the JAR version you can use the corresponding CLI command.
Code: Select all
filebot -version
But I would recommend to get the sysinfo using the sysinfo script with the CLI.
Code: Select all
filebot -script "sysinfo"

I was wondering if there is some way to tell the version in the jar file itself?
If I have several jar files I may not want to copy them one-by-one to the FileBot directory and run the script just to find the version..

viking · Post by **viking** » 23 Apr 2017, 00:57

Leokosta wrote:Hello, Viking ... Try using 7zip to extract the file. I got some errors, but in the end I could replace the .jar file, and Filebot seemes to be working fine.

As explained above, I am using WinRAR to extract; that works fine. The issue was GPG, but as I also explained above, that has also been taken care of.

Post by **rednoah** » 23 Apr 2017, 02:09

You can get the revision for each jar like this:

Code: Select all

java -jar /path/to/FileBot.jar -version

viking · Post by **viking** » 23 Apr 2017, 03:17

rednoah wrote:You can get the revision for each jar like this:
Code: Select all
java -jar /path/to/FileBot.jar -version

That worked. Thanks!

Sheldon · Post by **Sheldon** » 23 May 2017, 08:42

Hi,

there seems to be a problem with the latest gpg file.
The xz decompression throws an "Unexpected end of input" exception.

Please have a look!

Kind regards,

Sheldon

Post by **rednoah** » 23 May 2017, 10:17

Fixed.

Sheldon · Post by **Sheldon** » 23 May 2017, 10:50

Now it works fine! Thanks!

Sheldon · Post by **Sheldon** » 07 Jun 2017, 08:37

Hi,

calling https://sourceforge.net/projects/filebo ... ebot/HEAD/
throws a 404 exception.
Please have a look!

Kind regards,

Sheldon

Post by **rednoah** » 07 Jun 2017, 09:55

@see viewtopic.php?f=8&t=5091

Sheldon · Post by **Sheldon** » 19 Jun 2017, 09:08

https://get.filebot.net/filebot/latest/
Will it remain there?

Post by **rednoah** » 19 Jun 2017, 09:39

Yes. This is my own server so it won't depend on SF or be affected by SF issues. The update-filebot.sh has been updated accordingly.

Sheldon · Post by **Sheldon** » 19 Jun 2017, 09:44

Thanks!

Sheldon · Post by **Sheldon** » 25 Jun 2017, 09:51

https://get.filebot.net/filebot/latest/
FileBot.jar.xz.gpg 24-Jun-2017 23:29 18M

Is the version FileBot 4.7.10 (r5140) still correct?

Post by **rednoah** » 25 Jun 2017, 10:11

Due to CloudFlare caching, you may be seeing cached content. Just use the update-filebot.sh script once in a while and you'll be fine. You'll get the latest and greatest eventually.

Sheldon · Post by **Sheldon** » 25 Jun 2017, 10:30

Now it's FileBot 4.7.11 (r5154). Thanks!

Sheldon · Post by **Sheldon** » 07 Aug 2017, 07:56

If I download

FileBot.jar.xz.gpg 02-Aug-2017 23:40 18M

I still receive r5179. it seems to be the cache problem again.
Can this be somehow be avoided in the future?

Post by **rednoah** » 07 Aug 2017, 10:02

Unfortunately, the index page and the actual files may be cached differently.

I'd just call the update-filebot script once a week and not check the index page manually.

Sheldon · Post by **Sheldon** » 07 Aug 2017, 10:40

The check for a new file is automized.
I receive a news in my rss feed if the file was updated.

I fetch it as a Java InputStream from

https://get.filebot.net/filebot/latest/ ... jar.xz.gpg

but I always get r5179.

It's the same for the manual download. Really annoying!

Post by **rednoah** » 07 Aug 2017, 15:44

Caching is set to a week, but I also seem to be getting stale content:

Code: Select all

$ curl -I https://get.filebot.net/filebot/latest/FileBot.jar.xz.gpg
HTTP/1.1 200 OK
Date: Mon, 07 Aug 2017 15:43:01 GMT
...
Last-Modified: Mon, 24 Jul 2017 15:38:52 GMT
ETag: "11bf21b-5551203104e40"
CF-Cache-Status: HIT
Expires: Tue, 08 Aug 2017 15:43:01 GMT
...

I'll clear the cache manually for now. This might just a a small CloudFlare bug.

Sheldon · Post by **Sheldon** » 07 Aug 2017, 16:07

Thanks! Now it's FileBot 4.7.12 (r5192).

Maybe you can have a job clearing the cache after the new version upload.

Sheldon · Post by **Sheldon** » 13 Aug 2017, 11:24

I received a news about

FileBot.jar.xz.gpg - 07-Aug-2017 08:37

but on the website it's still

FileBot.jar.xz.gpg - 02-Aug-2017 23:40.

What should it be?

Post by **rednoah** » 13 Aug 2017, 15:24

The latest jar is from 07 Aug:

Code: Select all

$ curl -I https://get.filebot.net/filebot/latest/FileBot.jar.xz.gpg
HTTP/1.1 200 OK
Date: Sun, 13 Aug 2017 15:22:54 GMT
...
Last-Modified: Mon, 07 Aug 2017 15:37:50 GMT
ETag: "11d8b13-5562ba1282426"

Sheldon · Post by **Sheldon** » 13 Aug 2017, 17:09

Nope, I still get r5192.

Sheldon · Post by **Sheldon** » 13 Aug 2017, 19:52

Now it's forbidden?

Post by **rednoah** » 14 Aug 2017, 02:49

I disabled the index because it seems to be causing confusion.

The latest jar is available. I don't know what revision that is, but you can see the Last Modified date in my post above.

Sheldon · Post by **Sheldon** » 14 Aug 2017, 07:31

The revision is still r5192.

That's bad because my RSS feed is based on the index page.
I don't see any confusion. The only problem is that the wrong revision is provided.
That needs to be solved.
How can I see if there is a new revision in the future?

Currently I get a 403 Foridden exception. Please make the index available again.

Post by **rednoah** » 14 Aug 2017, 12:35

You can use the curl command to fetch and update the latest version. That's what the update-filebot.sh script does. The HTTP protocol does exactly what we need. Fetch new file if there is a new file.

Not sure what you're doing, but there is no RSS feed and parsing HTML index pages is generally a bad idea.

Sheldon · Post by **Sheldon** » 14 Aug 2017, 12:45

I download the source of the index page and parse it.
That works fine if there is something!:-)
SO PLEASE ENABLE IT!!!

Post by **rednoah** » 14 Aug 2017, 12:57

Use HTTP HEAD requests. You're doing something very simple in an unnecessarily complicated way.

Sheldon · Post by **Sheldon** » 14 Aug 2017, 13:09

I do this for all my RSS feeds for website without one.
I asked you in the beginning if it will staz like this and you said yes.
Now you change it again and I have to adapt. Just enable the index and it's fine.

Sheldon · Post by **Sheldon** » 14 Aug 2017, 13:49

I am not familiar with curl so it's again additional work for me. And I need it on windos.
Can you even provide some script I can use. This is really annoying.
Enabling the index would be much easier.

Post by **rednoah** » 14 Aug 2017, 14:12

HTTP is the most common network protocol. There are many many many tools that you can use. curl or wget would be among the most commonly used tools.

You have a bad solution that just so happened to kinda work. Now it doesn't, so it's time to do it properly. You will find that it'll be significantly easier (1 line) compared to whatever concoction you've come up with. I've been telling you to use curl for months. Please do.

Here is a script for you:
https://github.com/filebot/filebot/blob ... filebot.sh

You can refer to this script on how to use curl, gpg and xz to download, verify and extract the jar.

Sheldon · Post by **Sheldon** » 14 Aug 2017, 14:29

We never talked about curl. This is the first time for me.
You are joking. Such an effort only for the info that there is a new version.
I thought curl can do this.

Sheldon · Post by **Sheldon** » 14 Aug 2017, 14:44

I tried

curl -I https://get.filebot.net/filebot/latest/

and received

HTTP/2 403
date: Mon, 14 Aug 2017 14:37:40 GMT
content-type: text/html; charset=iso-8859-1
set-cookie: __cfduid=dc5720c2bd71f8c3534e5f8cd39c6ef221502721460; expires=Tue,
4-Aug-18 14:37:40 GMT; path=/; domain=.filebot.net; HttpOnly
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare-nginx
cf-ray: 38e4a747a808232a-FRA

And bow?

Sheldon · Post by **Sheldon** » 14 Aug 2017, 15:47

If I try

Code: Select all

curl  -I https://get.filebot.net/filebot/latest/FileBot.jar.xz.gpg

I get

Code: Select all

HTTP/2 200 
date: Mon, 14 Aug 2017 15:40:26 GMT
content-type: application/x-xz
content-length: 18713363
set-cookie: __cfduid=d10ddd5d3474533c37c51e8e1c94e555d1502725225; expires=Tue, 14-Aug-18 15:40:25 GMT; path=/; domain=.filebot.net; HttpOnly
last-modified: Mon, 07 Aug 2017 15:37:50 GMT
etag: "11d8b13-5562ba1282426"
cf-cache-status: HIT
expires: Tue, 15 Aug 2017 15:40:26 GMT
cache-control: public, max-age=86400
accept-ranges: bytes
server: cloudflare-nginx
cf-ray: 38e5033579bf2732-FRA

Your script downloads the gpg id HTTP_Code ne 200.
So this is the identifier right?

Post by **rednoah** » 14 Aug 2017, 15:48

Does this look like a large amount of effort?

Code: Select all

curl -L -o FileBot.jar.gpg -z FileBot.jar.gpg https://get.filebot.net/filebot/latest/FileBot.jar.xz.gpg

Whenever you call this command, it'll either download the latest version, or not download the latest version if there is none.

Sheldon · Post by **Sheldon** » 14 Aug 2017, 16:17

Yes it is because your command doesn't help at all. You directly download the gpg.
I need the info if there is a new version in an automized way.

Let's get back to my command.
If I get it right a download should be omitted if HTTP code equals 200.
For my RSS feed I can fetch the last modified if HTTP code not equals 200.
is this right?

So I have to parse the reponse,and put the data in the right format.
Additionally curl has to be added to my enviroment properly.
A bunch of work for somethng I already have.

Post by **rednoah** » 14 Aug 2017, 17:44

1.
Get Last Modified date for FileBot.jar.gpg and save it to a variable.

2.
Use curl with -z option so it doesn't download the file if it hasn't been modified.

3.
Get Last Modified date for FileBot.jar.gpg again and compare it to the previously stored variable. Did it change? If yes, then you have a new version. If no, then nothing has changed.

Not quite sure why you're talking about RSS feeds... Whatever you're doing with scraping HTML pages, you already did it the complicated way, so doing it the easy way now won't be very difficult for you, and you should have been doing it this way all along anyway.

Sheldon · Post by **Sheldon** » 14 Aug 2017, 17:56

As I mentiond above it's unnecessary effort but I will handle it.
Thanks for that and your support.

Sheldon · Post by **Sheldon** » 15 Aug 2017, 12:25

My RSS feed works properly again.
Please make sure that there are no more old revision cache issues in the future.
How do we get new lib files?

Post by **rednoah** » 15 Aug 2017, 12:30

Do you mean the native libraries? You can get them from the original author or compile it yourself for your platform. I also maintain some binaries for common platforms in the GitHub repository.

Sheldon · Post by **Sheldon** » 15 Aug 2017, 12:37

Yes, it's about the natives. Please provide some links.

heed · Post by **heed** » 26 Aug 2017, 04:55

Can not decrypt 4.7.12 Filebot.jar.xz.gpg getting the following error
PS C:\Program Files (x86)\GnuPG> gpg --trusted-key 4E402EBF7C3C6A71 --output FileBot.jar.xz --decrypt FileBot.jar.xz.gpg

gpg: Signature made 08/22/17 08:34:16 Pacific Daylight Time
gpg: using RSA key B0976E51E5C047AD0FD051294E402EBF7C3C6A71
gpg: issuer "[email protected]"
gpg: Can't check signature: No public key
PS C:\Program Files (x86)\GnuPG>
PS C:\Program Files (x86)\GnuPG> gpg --trusted-key 4E402EBF7C3C6A71 --output FileBot.jar.xz --decrypt FileBot.jar.xz.gpg

File 'FileBot.jar.xz' exists. Overwrite? (y/N) y
gpg: Signature made 08/22/17 08:34:16 Pacific Daylight Time
gpg: using RSA key B0976E51E5C047AD0FD051294E402EBF7C3C6A71
gpg: issuer "[email protected]"
gpg: Can't check signature: No public key
PS C:\Program Files (x86)\GnuPG>
Am i doing something wrong?

Post by **rednoah** » 26 Aug 2017, 07:53

You need to import my public key first and set it as trusted.

Post by **kim** » 11 Mar 2018, 00:21

it this and error or have you closed access to updates ?

https://get.filebot.net/filebot/latest/ ... jar.xz.gpg

Not Found

The requested URL /filebot/latest/FileBot.jar.xz.gpg was not found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

Post by **rednoah** » 11 Mar 2018, 02:36

The latest jar is no longer compatible with Java 8 which is a breaking change for most users. In fact, my automated tests run on my Synology NAS which only runs Java 8, so I've removed the latest jar so it doesn't auto-update to a jar that doesn't work.

Now that I think if it, the latest jar would also make a good addition as one of the perks of the crowded funded FileBot for Linux plan:
https://www.patreon.com/filebot

EDIT:

Sorry for the capitalism here, but if anybody that uses the latest jar could pledge $1 on Patreon that would give me a good indication for how many users want to see continued support for that.

Post by **kim** » 12 Mar 2018, 16:03

I'm sorry to see this development, but I understand why... however you can still share the file with a different URL path.

I think you are going about this "patreon" the wrong way, too "under the radar"... maybe release a new Filebot version that inform and link to https://www.patreon.com/filebot and with better info about how this works... as I read it:
"...$1,000 per release" = NO release if the goal isn't reached ?
if the goal isn't reached = users get nothing for their money ?
is the release a minor or major release ?
what if some feature stop working the next day after new release ?

maybe
"...$1,000 per release" = major release
"...$100 per release" = minor release
or
$5/10 per user = major release
$1 per user = minor release

If people do not know about this or it takes too long to reach the goal, people will move on and forget about Filebot, I think.

Post by **rednoah** » 12 Mar 2018, 16:34

$1k is the absolute minimum target, but more would be better. Nobody gets charged anything until I publish a release and and collect one round of pledges.

You can use Google / YouTube to learn more about how Patreon works. Support your favorite YouTube artists and see for yourself.

It's less about making money, and more about gauging the level of interest in continued support for Linux, and if anybody asks for updates then I have Patreon page I can refer people to, instead of just turning them down.

As long as FileBot 4.7.9 is around and works mostly just fine, I don't expect there to be much interest. But the Patreon page is there now, and we'll see how it goes.