Re: thoughts on signature verification
On Thu, Aug 08, 2002 at 01:04:34AM -0400, Colin Walters wrote:
> So, one of the things I want to do for the new dpkg-source is to
> actually verify signatures on source packages. I noticed debsigs and
> debsig-verify, but they appear to only operate on .deb packages.
What else do you need? The .dsc is just signed. All you need to do is
check the sig with gpg.
--
Debian - http://www.debian.org/
Linux 1394 - http://linux1394.sourceforge.net/
Subversion - http://subversion.tigris.org/
Deqo - http://www.deqo.com/
Reply to: