Re: apt-get and authentication

[Ephemeral root <ephemeroot@bluebottle.com>]

Quoting Rick Pasotto <rick@niof.net>:

> Why has apt-get started giving me this message:
> 
> WARNING: The following packages cannot be authenticated!

That's part of apt 0.6's new security feature. You must add
to your apt set-up the gpg public key of the archives where
you downloaded the packages. I think this has already been
done for you if you download only official Debian
packages.

For adding the keys of unofficial sites, read the man page,
or better, google for "apt-key". This assumes of course the
maintainer signs his unofficial archive by creating the
necessary Release (md5sum and sha1sums of the available
packages) and Release.gpg (the detached gpg signature of
the Release file).

You can also try to create the Release and Release.gpg files
yourself by using "apt-ftparchive." But that's a longer
story (one that took me three days of googling  to figure
out).

I hope my explanation doesn't read like a man page.