from localhost (localhost [127.0.0.1])
	by phobos.labs.netnoteinc.com (Postfix) with ESMTP id 4EBA143C32
	for <jm@localhost>; Fri, 16 Aug 2002 07:10:41 -0400 (EDT)
from phobos [127.0.0.1]
	by localhost with IMAP (fetchmail-5.9.0)
	for jm@localhost (single-drop); Fri, 16 Aug 2002 12:10:41 +0100 (IST)
from egwn.net (ns2.egwn.net [193.172.5.4]) by
    dogma.slashnull.org (8.11.6/8.11.6) with ESMTP id g7GBAYa14417 for
    <jm-rpm@jmason.org>; Fri, 16 Aug 2002 12:10:34 +0100
from linuxfr.dyndns.org
    (APastourelles-107-1-8-246.abo.wanadoo.fr [217.128.252.246]) by egwn.net
    (8.11.6/8.11.6/EGWN) with ESMTP id g7GB7VJ29687 for
    <rpm-list@freshrpms.net>; Fri, 16 Aug 2002 13:07:31 +0200
from localhost (localhost [127.0.0.1]) by linuxfr.dyndns.org
    (Postfix) with ESMTP id AA16A7BD12 for <rpm-list@freshrpms.net>;
    Fri, 16 Aug 2002 13:09:14 +0200 (CEST)
from 10.0.0.4 ( [10.0.0.4]) as user ajacoutot@linuxfr.dyndns.org
    by linuxfr.dyndns.org with HTTP; Fri, 16 Aug 2002 13:09:14 +0200
From rpm-list-admin@freshrpms.net  Fri Aug 16 12:10:41 2002

Hi, I wanted to know if I could post a request for rpm on the list, or if I had

from localhost (jalapeno [127.0.0.1])
	by spamassassin.taint.org (Postfix) with ESMTP id C262316F82
	for <zzzz@localhost>; Wed,  9 Oct 2002 10:52:20 +0100 (IST)
from egwn.net (ns2.egwn.net [193.172.5.4]) by
    dogma.slashnull.org (8.11.6/8.11.6) with ESMTP id g999a0K28408 for
    <zzzz-rpm@spamassassin.taint.org>; Wed, 9 Oct 2002 10:36:01 +0100

On Wed, 9 Oct 2002 11:03:11 +0200, Matthias Saou <matthias@rpmforge.net> wrote:
> I don't think gpg signing my repositories will help anything, as it will
> just ensure that my passphrase was typed to confirm the md5 signatures of
> all pgklists and srclists. Basically, you'll then just be sure that it's me
> who generated the files, and this will of course prevent automating the
> process of updating the apt repository when Red Hat updates show up.
Isn't there a packager-key that's concealed inside the rpm?  Things have changed a bit since I used to work with'em, but I thought there was some internal number that must be compared to be correct (or, presumably, return an error.)
> In Red Hat Linux 8.0 though, the warnings about "No Key" appear until you
> import the right gpg public keys directly with rpm, for example :
> rpm --import /usr/share/doc/apt-0.5.4cnc7/RPM-GPG-KEY
> (this will import my key, which is used to sign all freshrpms.net packages)
Hey, cool; wether it protects me or not, I feel better about it.
> Hopefully it is possible to the tell rpm to install *only* packages who
> verify against an imported gpg key? This for me would be the optimal way to
> ensure integrity with the way things curently work.
Yeah, surely there's a flag for that; there is, for everything else, aye?  :)
------------------------------------------------------------------------
Brian Fahrländer              Linux Zealot, Conservative, and Technomad
Evansville, IN                    My Voyage: http://www.CounterMoon.com
ICQ  5119262
------------------------------------------------------------------------
angegangen, Schlange-Hüften, sein es ganz rüber jetzt. Bügel innen fest,
weil es eine lange, süsse Fahrt ist.
_______________________________________________
RPM-List mailing list <RPM-List@freshrpms.net>
http://lists.freshrpms.net/mailman/listinfo/rpm-list