Re: debsign process
Julian Gilbey wrote:
> Fun, fun, fun. There are three different signing programs around at
> present, AFAIK: dpkg-buildpackage, which signs the .dsc and .changes
> files; debsign, which emulates the signing part of dpkg-buildpackage,
> and debsigs, which signs the control.tar.gz and data.tar.gz within the
> .deb itself. None of them are safe to cache the passphrase (which
> should require a setuid-root binary to allocate safe memory; I note
> that mutt does not do this, though). Which one would be rewritten?
It would be much nicer if bug #89094 could just be implemented. If gpg
supported signing multiple files in one pass, one of the above could
just use that support and we wouldn't have to worry about another
security issue. (And for free we'd half the existing number of
passphrase entries too..)
(It might be a nice start if James would at least forward the wishlist
upsteam. :-/)
--
see shy jo
Reply to: