[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Revival of the signed debs discussion



John Goerzen wrote:
> On Mon, Dec 01, 2003 at 03:30:58PM +0100, Thomas Viehmann wrote:
> 
>>However: As "md5sum my.deb ; ar q my.deb _deb_signature ; ar d my.deb
>>_deb_signature ; md5sum my.deb"  gives two different lines, I'd think
>>signing the individual members of the deb, not the deb in itself is
> 
> 
> Please check out the debsigs package.  I wrote it when I worked at
> Progeny back in 2001, and Branden Robinson maintains it these days.  It
> does exactly that.
Of course! Thanks for pointing this out, my apoligies for not noticing.
(But he promised a man with three noses!)

Yet, it hasn't made it into the standard developer outfit, which seems
to be part of Goswin's point.

Cheers

T.

Attachment: pgpQanGKB_20o.pgp
Description: PGP signature


Reply to: