Re: verification of packages with gnupg/apt-key
Andrei Mikhailovsky <andrei@arhont.com> writes:
> Has anyone anyone manage to make verification of packages/Release files
> work under amd64?
You have to obtain the AMD64 Archive Key (for example from a keyserver:
http://pgpkeys.pca.dfn.de:11371/pks/lookup?op=vindex&search=0xE415B2B4B5F5BBED)
and verify its authenticity. Then you can use "apt-key add" to add it to
the list of keys which apt considers trusted.
Verifying the authenticity might be the hardest part of it. I'm in the
fortunate position of having met one of the signers of the archive key
(Joerg Jaspert) face to face and having verified his key. However, if
you don't have a trust path to any Debian Developer's key, you're out of
luck.
Martin
Reply to: