Congratulations! Missing 3.0.0 tag?

[William Roberts]

On Wed, Sep 8, 2021 at 5:15 PM Steffen Nurpmeso <steffen at sdaoden.eu> wrote:
>
> Hello.
>
> William Roberts wrote in
>  <CAFftDdok9ji-92ZP4yA_anXbfAxD7kcGWSJqU=v0p8=5LBVZvg at mail.gmail.com>:
>  |It's there:
>  |https://github.com/openssl/openssl/releases/tag/openssl-3.0.0
>  |
>  |I checked it out this morning.
>
> Oh!  I have
>
>     fetch = +refs/heads/master:refs/remotes/origin/master
>     fetch = +refs/heads/OpenSSL_1_0_2-stable:refs/remotes/origin/OpenSSL_1_0_2-stable
>     fetch = +refs/heads/OpenSSL_1_0_1-stable:refs/remotes/origin/OpenSSL_1_0_1-stable
>     fetch = +refs/heads/OpenSSL_1_1_0-stable:refs/remotes/origin/OpenSSL_1_1_0-stable
>     fetch = +refs/heads/OpenSSL_1_1_1-stable:refs/remotes/origin/OpenSSL_1_1_1-stable
>
> and only saw refs/tags/openssl-3.0.0-alpha* and -beta*!
> I see now via ls-remote there is a new openssl-3.0 branch..
>
>   From git://git.openssl.org/openssl
>    * [new branch]            openssl-3.0 -> origin/openssl-3.0
>    * [new tag]               openssl-3.0.0 -> openssl-3.0.0
>
> Yes, there it is, thank you!
>
> P.S.: maybe at least release commits and tags could be signed?
> And/or HTTPS access to the repository ... but then i get the gut
> feeling that the answer to this will be "use github" or something.
>

You could grab the release tarballs which have signatures
https://www.openssl.org/source/