Re: package sig checking ?
On Mon, Oct 08, 2001 at 01:17:16PM +0200, christophe barb? wrote:
> le ven 05-10-2001 at 20:37 Colin Watson a ?crit :
> > On Fri, Oct 05, 2001 at 04:15:00PM +0200, christophe barb? wrote:
> > > Is-it possible to configure apt-get to check package GPG signature
> > > before installing it ?
> >
> > You can install debsig-verify and change /etc/dpkg/dpkg.cfg to say
> > 'debsig'. There are very few (none?) signed packages in Debian yet,
> > though, and IIRC debsig-verify causes you trouble if you try to install
> > unsigned packages.
>
> Is it planned to require from a package to be signed ?
> If it's not mandatory it looks useless.
That's the plan, but we need a transition outline first. I've yet to
complete one.
--
.----------=======-=-======-=========-----------=====------------=-=-----.
/ Ben Collins -- Debian GNU/Linux \
` bcollins@debian.org -- bcollins@openldap.org -- bcollins@linux.com '
`---=========------=======-------------=-=-----=-===-======-------=--=---'
Reply to: