Date: Fri, 10 Oct 2014 14:47:27 -0500 From: Bryan Drewery <bdrewery@FreeBSD.org> To: scratch65535@att.net, freebsd-ports <freebsd-ports@freebsd.org> Subject: Re: PKG not quite ready for prime time Message-ID: <543837CF.9070607@FreeBSD.org> In-Reply-To: <1a8g3athvnun67c4kljhjtsjjlc30116j1@4ax.com> References: <sl4g3adpms8lkd2rr38n3666et8eptsp9i@4ax.com> <543817AA.8080305@gmx.de> <he6g3apojoln19fd9d8gr2rs0koq3a6940@4ax.com> <54381E16.9070609@FreeBSD.org> <1a8g3athvnun67c4kljhjtsjjlc30116j1@4ax.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--kqq3QeW6OLOKMpAN4rD1nMFHu3po4bbAC
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
On 10/10/2014 1:12 PM, scratch65535@att.net wrote:
> On Fri, 10 Oct 2014 12:57:42 -0500, Brian Drewery wrote:
>=20
>> find /usr/share/keys/pkg -exec sha256 {} +
>=20
> No such file
That's your problem. You are missing the signature fingerprints to
compare against. As such Pkg is refusing to do anything to prevent MITM
attacks.
You are missing this:
https://www.freebsd.org/security/advisories/FreeBSD-EN-14:03.pkg.asc
freebsd-update can provide it.
--=20
Regards,
Bryan Drewery
--kqq3QeW6OLOKMpAN4rD1nMFHu3po4bbAC
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
iQEcBAEBAgAGBQJUODfPAAoJEDXXcbtuRpfPVz4H/0k98Oa8kabDqDnOhGr777vd
2jFealBzO4AO5j7CpVpw86gX4tfFTFx32MhAIQQscKA6qzeXSRsYskNOfe0fojku
/298T9ftICKVwaRI+eRPnfB2Ba848Y6H2EcDmMYc6vhHCug4kWCfol4NR2y7Pcj3
of5XgZnHCc0am8wYLu/KdBPtIi8ykiBpd+Whj/0WSKAreJ1zEsTl9VxCoiDPt6oV
JD6AQFB/VBah05EDCWzjED3IdXbd5z52enD/pWK4xuSP3hGZuhPsy5lLW/Z4uI3Y
zSRryjwj8JnCuSQWbJcnmXStGMsrLmMpHH40eo9qTZpbHu7IHOP/Jru97niVJ9E=
=2N1I
-----END PGP SIGNATURE-----
--kqq3QeW6OLOKMpAN4rD1nMFHu3po4bbAC--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?543837CF.9070607>