Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 08 Oct 2013 07:22:57 +0100
From:      Matthew Seaman <m.seaman@infracaninophile.co.uk>
To:        mexas@bris.ac.uk
Cc:        freebsd-ports@freebsd.org
Subject:   Re: pkg: explain PUBKEY
Message-ID:  <5253A4C1.9020202@infracaninophile.co.uk>
In-Reply-To: <201310072037.r97KbAYH054287@mech-cluster241.men.bris.ac.uk>
References:  <201310072037.r97KbAYH054287@mech-cluster241.men.bris.ac.uk>

next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--0tr2NAjOcNMEva5kTKje2euM2jHrJpiFD
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On 07/10/2013 21:37, Anton Shterenlikht wrote:
> The pkg.conf(5) man page only
> says:
>=20
>      PUBKEY: string              Specifies the location to the public R=
SA key
>                                  used for signing the repository databa=
se.
>                                  The default value for this file is
>                                  /etc/ssl/pkg.conf
>=20
> I'm not clear which side creates this file:
> the server which builds the packages?
> Or the client that gets the packages
> from the server? Or something else
> altogether?

This is an optional function.  You can just leave the entry blank if you
don't need to sign the packages.  Otherwise, you can create an RSA
keypair using the instructions shown in Glen's blog, and copy the pub
key onto all your client machines.

https://glenbarber.us/2012/06/11/Maintaining-Your-Own-pkgng-Repository.ht=
ml

I note that there are changes to the digital signing code coming with
pkg-1.2 to support package signatures for 10.x

	Cheers,

	Matthew



--=20
Dr Matthew J Seaman MA, D.Phil.

PGP: http://www.infracaninophile.co.uk/pgpkey
JID: matthew@infracaninophile.co.uk


--0tr2NAjOcNMEva5kTKje2euM2jHrJpiFD
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.20 (Darwin)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=pM9p
-----END PGP SIGNATURE-----

--0tr2NAjOcNMEva5kTKje2euM2jHrJpiFD--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5253A4C1.9020202>