Re: Live Media
On Fri, Feb 13, 2009 at 04:10:46PM +0100, Daniel Baumann wrote:
> Tzafrir Cohen wrote:
> > Is there an automated way to get the public key for the repository
> > from a repository URL? If so, those steps could be automated.
>
> for 'my' repositories, you actually can. i always put a file
> 'archive-key.asc' in the root directory of the repository that contains
> the current valid key that was used to sign the archive.
Is this an official or semi-official location?
> however, as you
> stated yourself, fetching blindly a key may defeat the purpose of having
> one in the first place (which means, it's basically the same as
> disabling signature checking with --apt-secure disable).
--
Tzafrir Cohen
icq#16849755 jabber:tzafrir.cohen@xorcom.com
+972-50-7952406 mailto:tzafrir.cohen@xorcom.com
http://www.xorcom.com iax:guest@local.xorcom.com/tzafrir
Reply to: