Date: Tue, 14 Jan 2014 12:10:14 +0000 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: Yuri <yuri@rawbw.com>, freebsd-pkg@freebsd.org Subject: Re: Does pkg check signatures? Message-ID: <52D52926.5090104@infracaninophile.co.uk> In-Reply-To: <52D5269A.5090803@rawbw.com> References: <52D5269A.5090803@rawbw.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --6JP1Q8BpIqmfXPrTxtwES8kh9JfOvSKGF Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On 01/14/14 11:59, Yuri wrote: > In October announcement has been made that pkg-1.2 will support package= > signing: > https://lists.freebsd.org/pipermail/freebsd-pkg/2013-October/000107.htm= l > Now I am running 'pkg install' using pkg-1.2.5 on 9.2, and don't see it= > opening any files related to keys/signatures in ktrace log. pkg is fully capable of checking cryptographic signatures if configured to do so. Specifically you need 'signature-type' and 'fingerprints' defined in your repo.conf Try using the standard /etc/pkg/FreeBSD.conf available here: http://svnweb.freebsd.org/base/head/etc/pkg/FreeBSD.conf?view=3Dlog and the public key in /usr/share/keys/pkg available here: http://svnweb.freebsd.org/base/head/share/keys/pkg/trusted/pkg.freebsd.or= g.2013102301?view=3Dlog Cheers, Matthew --6JP1Q8BpIqmfXPrTxtwES8kh9JfOvSKGF Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (FreeBSD) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQJ8BAEBCgBmBQJS1SkuXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQxOUYxNTRFQ0JGMTEyRTUwNTQ0RTNGMzAw MDUxM0YxMEUwQTlFNEU3AAoJEABRPxDgqeTnJHUP/1r4AiVKw/mTnqeYH715jEvm g4iX59ECjkZzKXpitn/gOCN0F1rPOZniVhATXUaMC8NjcH9ej65wO3y4ZJ77Eell 5UqwyuYZmq8hLC5ZpisbfIRmOlwP5znVrkKx0Y9xHxTlM95lO3ntWV6AurMsveze pqUv0p2IaXREb0aPlVgcr2IK/S7XhbWE6U93/UGatlOnONU7yp8zq/EFFH2q0u2F 1mUyhUZzxspMtaABPNHCc6qGGaUZ2tTKy1rEEOA6bakLxLGqQMk3whdQhDV/ImpO ve4LGp7vM+8d+Jl8eyoH5DSptWZuyxDaX4LStvEOylss62D1gRg+gN8unh/untpf Iychu2e+hZ9t0PwqqavEj/WBSbsykvSj4U9mp1DL/9YEGI98OVoXCPjqNBbrTKnK 4fATcqxJu2vqKo/DvcP5CrWZPoeRBmSoC5296J9XSs9pILrgrobR3d4Q8pNrOKcO EVhdRiG94UvdL5PPYAhItIq4r3U5CYpIupriGUm/EGWHJYddmYUjgIDM4A04boHn ZYywezwn23ejIjrlpzzsG3tiqv0p0xZgd0kfs4H+0GFHeImzKBgC2tDT6RI0ChzG oBhnflm8psve0+h90kJNAcK2UjrijH3ztdDd5g5INd6daVVYd64BGgi9NbhsVZV4 3qHjSq+r2IzIpqbPsW6Q =HOqR -----END PGP SIGNATURE----- --6JP1Q8BpIqmfXPrTxtwES8kh9JfOvSKGF--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?52D52926.5090104>