Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 31 Dec 2000 02:21:01 -0600
From:      "Michael C . Wu" <keichii@iteration.net>
To:        Wes Peters <wes@softweyr.com>
Cc:        Will Andrews <will@physics.purdue.edu>, ports@FreeBSD.ORG, Robert Watson <rwatson@FreeBSD.ORG>, Warner Losh <imp@village.org>, Kris Kennaway <kris@FreeBSD.ORG>
Subject:   Re: Package signing tools
Message-ID:  <20001231022101.A24801@peorth.iteration.net>
In-Reply-To: <3A4EDE33.84C7072@softweyr.com>; from wes@softweyr.com on Sun, Dec 31, 2000 at 12:20:19AM -0700
References:  <3A4ED1C0.14061CE5@softweyr.com> <20001231003920.A24519@peorth.iteration.net> <20001231014344.T305@argon.firepipe.net> <3A4EDE33.84C7072@softweyr.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Dec 31, 2000 at 12:20:19AM -0700, Wes Peters scribbled:
| Will Andrews wrote:
| > 
| > On Sun, Dec 31, 2000 at 12:39:20AM -0600, Michael C . Wu wrote:
| > > You can also use the Perl PGP module.  However, at the very least you
| > > really want to have PGP5 or PGP6.
| > 
| > What about other types of signatures?  Should we support more than one kind?
| 
| It currently supports X.509 (which I heartily recommend), PGP (which is
| somewhat shaky, as I pointed out), and MD5, where you prime the ports
| database with an MD5 file and then check that the MD5 of the .tgz file
| against that.

You misunderstood me. :) I was saying, "You can replace original PGP
with perl pgp module or pgp5/6."

| > > Consider integrating pkg_version with this?  This would allow
| > > for global ports update.
| > 
| > Yes, PLEASE don't create a new program.  Integrate this functionality
| > (checking signatures) into pkg_info or pkg_version (I prefer the former
| > myself).

By integration, I meant that the output should be parseable by pkg_version
and pkg_info.

| 
-- 
+------------------------------------------------------------------+
| keichii@peorth.iteration.net         | keichii@bsdconspiracy.net |
| http://peorth.iteration.net/~keichii | Yes, BSD is a conspiracy. |
+------------------------------------------------------------------+


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001231022101.A24801>