From: rpm-list-admin@freshrpms.net  Wed Oct  9 10:53:22 2002
Return-Path: <rpm-zzzlist-admin@freshrpms.net>
Delivered-To: zzzz@localhost.example.com
Received: from localhost (jalapeno [127.0.0.1])
	by example.com (Postfix) with ESMTP id C262316F82
	for <zzzz@localhost>; Wed,  9 Oct 2002 10:52:20 +0100 (IST)
Received: from jalapeno [127.0.0.1]
	by localhost with IMAP (fetchmail-5.9.0)
	for zzzz@localhost (single-drop); Wed, 09 Oct 2002 10:52:20 +0100 (IST)
Received: from egwn.net (ns2.egwn.net [193.172.5.4]) by
    dogma.slashnull.org (8.11.6/8.11.6) with ESMTP id g999a0K28408 for
    <zzzz-rpm@example.com>; Wed, 9 Oct 2002 10:36:01 +0100
Received: from auth02.nl.egwn.net (localhost [127.0.0.1]) by egwn.net
    (8.11.6/8.11.6/EGWN) with ESMTP id g999T2f09799; Wed, 9 Oct 2002 11:29:02
    +0200
Received: from evv.kamakiriad.local (cable-b-36.sigecom.net
    [63.69.210.36]) by egwn.net (8.11.6/8.11.6/EGWN) with ESMTP id
    g999Rif01254 for <rpm-list@freshrpms.net>; Wed, 9 Oct 2002 11:27:45 +0200
Received: from aquila.kamakiriad.local (aquila.kamakiriad.local
    [192.168.1.3]) by kamakiriad.com (8.11.6/8.11.6) with SMTP id g999RWP18078
    for <rpm-list@freshrpms.net>; Wed, 9 Oct 2002 04:27:32 -0500
From: Brian Fahrlander <kilroy@kamakiriad.com>
To: rpm-zzzlist@freshrpms.net
Subject: Re: Apt repository authentication: it's time
Message-Id: <20021009042734.049ea20e.kilroy@kamakiriad.com>
In-Reply-To: <20021009110311.32c22ea5.matthias@rpmforge.net>
References: <20021008175452.581c0e50.kilroy@kamakiriad.com>
    <20021009110311.32c22ea5.matthias@rpmforge.net>
X-Mailer: Sylpheed version 0.8.5 (GTK+ 1.2.10; i386-redhat-linux)
X-Message-Flag: : Shame on you!  You know Outlook is how viruses are spread!
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Mailscanner: Found to be clean, Found to be clean
Sender: rpm-zzzlist-admin@freshrpms.net
Errors-To: rpm-zzzlist-admin@freshrpms.net
X-Beenthere: rpm-zzzlist@freshrpms.net
X-Mailman-Version: 2.0.11
Precedence: bulk
Reply-To: rpm-zzzlist@freshrpms.net
List-Help: <mailto:rpm-zzzlist-request@freshrpms.net?subject=help>
List-Post: <mailto:rpm-zzzlist@freshrpms.net>
List-Subscribe: <http://lists.freshrpms.net/mailman/listinfo/rpm-zzzlist>,
    <mailto:rpm-list-request@freshrpms.net?subject=subscribe>
List-Id: Freshrpms RPM discussion list <rpm-zzzlist.freshrpms.net>
List-Unsubscribe: <http://lists.freshrpms.net/mailman/listinfo/rpm-zzzlist>,
    <mailto:rpm-list-request@freshrpms.net?subject=unsubscribe>
List-Archive: <http://lists.freshrpms.net/pipermail/rpm-zzzlist/>
X-Original-Date: Wed, 9 Oct 2002 04:27:34 -0500
Date: Wed, 9 Oct 2002 04:27:34 -0500
X-Spam-Status: No, hits=-9.8 required=5.0
	tests=AWL,EMAIL_ATTRIBUTION,FORGED_RCVD_TRAIL,IN_REP_TO,
	      KNOWN_MAILING_LIST,QUOTED_EMAIL_TEXT,REFERENCES,
	      REPLY_WITH_QUOTES,T_NONSENSE_FROM_99_100
	version=2.50-cvs
X-Spam-Level: 

On Wed, 9 Oct 2002 11:03:11 +0200, Matthias Saou <matthias@rpmforge.net> wrote:

> I don't think gpg signing my repositories will help anything, as it will
> just ensure that my passphrase was typed to confirm the md5 signatures of
> all pgklists and srclists. Basically, you'll then just be sure that it's me
> who generated the files, and this will of course prevent automating the
> process of updating the apt repository when Red Hat updates show up.

    Isn't there a packager-key that's concealed inside the rpm?  Things have changed a bit since I used to work with'em, but I thought there was some internal number that must be compared to be correct (or, presumably, return an error.)
 
> In Red Hat Linux 8.0 though, the warnings about "No Key" appear until you
> import the right gpg public keys directly with rpm, for example :
> rpm --import /usr/share/doc/apt-0.5.4cnc7/RPM-GPG-KEY
> (this will import my key, which is used to sign all freshrpms.net packages)

    Hey, cool; wether it protects me or not, I feel better about it.
 
> Hopefully it is possible to the tell rpm to install *only* packages who
> verify against an imported gpg key? This for me would be the optimal way to
> ensure integrity with the way things curently work.

    Yeah, surely there's a flag for that; there is, for everything else, aye?  :)

------------------------------------------------------------------------
Brian Fahrl�nder              Linux Zealot, Conservative, and Technomad
Evansville, IN                    My Voyage: http://www.CounterMoon.com
ICQ  5119262
------------------------------------------------------------------------
angegangen, Schlange-H�ften, sein es ganz r�ber jetzt. B�gel innen fest,
weil es eine lange, s�sse Fahrt ist. 

_______________________________________________
RPM-List mailing list <RPM-List@freshrpms.net>
http://lists.freshrpms.net/mailman/listinfo/rpm-list


