[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: dpkg-sig: sign binary debian archive files



On Sat, Dec 27, 2003 at 10:25:22AM -0500, Ben Collins wrote:
> On Sat, Dec 27, 2003 at 09:49:33AM +0100, Andreas Barth wrote:
> > Hi,
> > 
> > we discussed here and elsewhere signatures on binary debian archive
> > files. dpkg-sig is capable of creating and verifying these signatures.
> > It has been uploaded to the archive, but due to the current
> > non-processing of NEW it'll take some time till it is available.
> > 
> > The latest development version is always available at
> > deb http://dpkg-sig.turmzimmer.net/dpkg-sig/ ./
> > deb-src http://dpkg-sig.turmzimmer.net/dpkg-sig/ ./
> 
> What's the difference between this and the tools that already existed?

I tried to describe them in the Securing Debian Manual:

http://www.debian.org/doc/manuals/securing-debian-howto/ch7.en.html#s-deb-pack-sign

Improvements for it (in the form of patches) are welcome.

Regards

Javi

Attachment: signature.asc
Description: Digital signature


Reply to: