[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: bsign-0.1.7, won't sign ssh and others



On Mon, Dec 14, 1998 at 11:15:24AM -0800, Oscar Levi wrote:
> > I think it's a very good administration tool. Probably impractical on a
> > package wide basis tho. Is there any way to get it to sign .deb packages?
> > That would be useful...
> 
> Debs are already signed?  I don't follow you here.  Do you mean resign
> debs with a site-local key?  Hmm.  I can see this might be valuable,
> but it isn't in my ken at the moment.  I think that would be something
> for the 'dpkg-*' stuff.

Debs have md5sums in the .dsc which is in turn signed. I was interested in
the actual file being signed internally some how to verify the
maintainer's sig and that it is uncorrupt.

-- 
-----    -- - -------- --------- ----  -------  -----  - - ---   --------
Ben Collins <b.m.collins@larc.nasa.gov>                  Debian GNU/Linux
UnixGroup Admin - Jordan Systems Inc.                 bcollins@debian.org
------ -- ----- - - -------   ------- -- The Choice of the GNU Generation


Reply to: