from localhost (jalapeno [127.0.0.1])
	by example.com (Postfix) with ESMTP id 7447D16F7F
	for <zzzz@localhost>; Wed,  9 Oct 2002 10:52:16 +0100 (IST)
from egwn.net (auth02.nl.egwn.net [193.172.5.4]) by
    dogma.slashnull.org (8.11.6/8.11.6) with ESMTP id g9999BK27619 for
    <zzzz-rpm@example.com>; Wed, 9 Oct 2002 10:09:11 +0100
No, hits=-27.9 required=5.0
	tests=AWL,IN_REP_TO,KNOWN_MAILING_LIST,NOSPAM_INC,
	      QUOTED_EMAIL_TEXT,REFERENCES,REPLY_WITH_QUOTES,
	      SIGNATURE_SHORT_SPARSE,T_NONSENSE_FROM_40_50
	version=2.50-cvs

Once upon a time, Brian wrote :
>      OK, it's now time to work out the PGP securing of apt repository
>      traffic. I've never gotten anything but "sitename.whatever will not
>      be authenticated" until running Redhat 8.0 when I get something
>      about having "No Key" for various files.
I don't think gpg signing my repositories will help anything, as it will
just ensure that my passphrase was typed to confirm the md5 signatures of
all pgklists and srclists. Basically, you'll then just be sure that it's me
who generated the files, and this will of course prevent automating the
process of updating the apt repository when Red Hat updates show up.
In Red Hat Linux 8.0 though, the warnings about "No Key" appear until you
import the right gpg public keys directly with rpm, for example :
rpm --import /usr/share/doc/apt-0.5.4cnc7/RPM-GPG-KEY
(this will import my key, which is used to sign all freshrpms.net packages)
Hopefully it is possible to the tell rpm to install *only* packages who
verify against an imported gpg key? This for me would be the optimal way to
ensure integrity with the way things curently work.
Matthias
--
Clean custom Red Hat Linux rpm packages : http://freshrpms.net/
Red Hat Linux release 7.3 (Valhalla) running Linux kernel 2.4.18-10acpi
Load : 0.14 0.18 0.17
_______________________________________________
RPM-List mailing list <RPM-List@freshrpms.net>
http://lists.freshrpms.net/mailman/listinfo/rpm-list

from localhost (jalapeno [127.0.0.1])
	by example.com (Postfix) with ESMTP id C262316F82
	for <zzzz@localhost>; Wed,  9 Oct 2002 10:52:20 +0100 (IST)
from jalapeno [127.0.0.1]
	by localhost with IMAP (fetchmail-5.9.0)
	for zzzz@localhost (single-drop); Wed, 09 Oct 2002 10:52:20 +0100 (IST)
from egwn.net (ns2.egwn.net [193.172.5.4]) by
    dogma.slashnull.org (8.11.6/8.11.6) with ESMTP id g999a0K28408 for
    <zzzz-rpm@example.com>; Wed, 9 Oct 2002 10:36:01 +0100
from evv.kamakiriad.local (cable-b-36.sigecom.net
    [63.69.210.36]) by egwn.net (8.11.6/8.11.6/EGWN) with ESMTP id
    g999Rif01254 for <rpm-list@freshrpms.net>; Wed, 9 Oct 2002 11:27:45 +0200
from aquila.kamakiriad.local (aquila.kamakiriad.local
    [192.168.1.3]) by kamakiriad.com (8.11.6/8.11.6) with SMTP id g999RWP18078
    for <rpm-list@freshrpms.net>; Wed, 9 Oct 2002 04:27:32 -0500
No, hits=-9.8 required=5.0
	tests=AWL,EMAIL_ATTRIBUTION,FORGED_RCVD_TRAIL,IN_REP_TO,
	      KNOWN_MAILING_LIST,QUOTED_EMAIL_TEXT,REFERENCES,
	      REPLY_WITH_QUOTES,T_NONSENSE_FROM_99_100
	version=2.50-cvs
From rpm-list-admin@freshrpms.net  Wed Oct  9 10:53:22 2002