[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [RFH] The need for signed packages and signed Releases (long, long)

On Tue, 12 Nov 2002, Oliver Kurth wrote:

> I am currently playing with debsigs. What is meant by 'type' for the --sign
> option? I tried 'foo' and 'deb', I get signatures into the deb as can be seen
> with ar tf, but debsig-verify says there are no signatures. The 'type'
> ends up in the filename of the signature.

Because debsigs creates debs in a non-standard way, and debsigs-verify uses
apt-inst, which doesn't handle non-standard deb formats.

This particular issue has already been discussed.  both parts of this equation
are at fault, and will be fixed.

Reply to: