Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 14 Sep 2015 15:43:52 -0700
From:      Bryan Drewery <bdrewery@FreeBSD.org>
To:        =?UTF-8?Q?Marko_Cupa=c4=87?= <marko.cupac@mimar.rs>, Baptiste Daroussin <bapt@FreeBSD.org>
Cc:        freebsd-stable@freebsd.org
Subject:   Re: 10.2-RELEASE-p2 lost ability to bootstrap pkg with signature_type="pubkey"
Message-ID:  <55F74DA8.5020503@FreeBSD.org>
In-Reply-To: <20150909091412.350c51ed@efreet>
References:  <20150908123838.238e5e74@efreet> <20150908212859.GD38185@ivaldir.etoilebsd.net> <20150909091412.350c51ed@efreet>

next in thread | previous in thread | raw e-mail | index | archive | help
On 9/9/15 12:14 AM, Marko Cupa=C4=87 wrote:
> On Tue, 8 Sep 2015 23:28:59 +0200
> Baptiste Daroussin <bapt@FreeBSD.org> wrote:
>=20
>> On Tue, Sep 08, 2015 at 12:38:38PM +0200, Marko Cupa=C4=87 wrote:
>>> Hi,
>>>
>>> I just found out that 10.2-RELEASE-p2 lost ability to bootstrap pkg
>>> with signature_type=3D"pubkey".
>>>
>>> Quick search returns:
>>> https://github.com/freebsd/pkg/issues/1309
>>> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D202622
>>>
>>> I guess it is not hard to switch repo to fingerprints, however I
>>> would not expect to lose this functionality by updating to
>>> patchlevel.
>>>
>> Implemented in head: r287579 I will MFC it asap. And see if it cannot
>> be added asap to a next patchlevel update.
>>
>> Best regards,
>> Bapt
>=20
> Thanx!
>=20
> Just a few quick not-completely-related questions: poudriere has the
> ability to sign repos with PKG_REPO_SIGNING_KEY, but not with external
> command, right?

Poudriere already has SIGNING_COMMAND support for external command. It
is used for the fingerprints signing on pkg.FreeBSD.org.

What is lacking is signing pkg with the new format added in r287579 when
using pubkey.

I am adding it in now for the next release.

>
 Is there a plan to support it? Can I build packages in
> poudriere without PKG_REPO_SIGNING_KEY, and sign repo later on with
> external command?
>=20
> Regards,
>=20


--=20
Regards,
Bryan Drewery



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?55F74DA8.5020503>