[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#207400: An RPM port of APT

On Wed, 2003-08-27 at 15:15, Gustavo Niemeyer wrote:

> I've just read "How it works" in the URL you mentioned. That's exactly
> how our system works. 

The high level is the same, but the implementation details are not. 
Mainly we have a metaIndex object which itself queues the index files
for download once it's done and verified.  This came out of a lot of
discussion with Jason.  Also the fingerprint checking is a bit more
abstracted.  And there's other things too that I don't recall offhand.

> They have even mentioned to be using a "small
> part" of our code in the "Authors" section (besides that which was
> *already* merged in APT, I belive).

Yeah.  We took your gpg method, and turned it into a gpgv method, since
using root's keyring doesn't seem like a good idea to me.
There were other smallish cleanups and fixes associated with this.

Reply to: