On Sat, Dec 27, 2003 at 10:25:22AM -0500, Ben Collins wrote: > On Sat, Dec 27, 2003 at 09:49:33AM +0100, Andreas Barth wrote: > > Hi, > > > > we discussed here and elsewhere signatures on binary debian archive > > files. dpkg-sig is capable of creating and verifying these signatures. > > It has been uploaded to the archive, but due to the current > > non-processing of NEW it'll take some time till it is available. > > > > The latest development version is always available at > > deb http://dpkg-sig.turmzimmer.net/dpkg-sig/ ./ > > deb-src http://dpkg-sig.turmzimmer.net/dpkg-sig/ ./ > > What's the difference between this and the tools that already existed? I tried to describe them in the Securing Debian Manual: http://www.debian.org/doc/manuals/securing-debian-howto/ch7.en.html#s-deb-pack-sign Improvements for it (in the form of patches) are welcome. Regards Javi
Attachment:
signature.asc
Description: Digital signature