Re: thoughts on signature verification
On Thu, Aug 08, 2002 at 01:04:34AM -0400, Colin Walters wrote:
> So, one of the things I want to do for the new dpkg-source is to
> actually verify signatures on source packages. I noticed debsigs and
> debsig-verify, but they appear to only operate on .deb packages.
What else do you need? The .dsc is just signed. All you need to do is
check the sig with gpg.
Debian - http://www.debian.org/
Linux 1394 - http://linux1394.sourceforge.net/
Subversion - http://subversion.tigris.org/
Deqo - http://www.deqo.com/