Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 14 Jan 2014 12:10:14 +0000
From:      Matthew Seaman <m.seaman@infracaninophile.co.uk>
To:        Yuri <yuri@rawbw.com>, freebsd-pkg@freebsd.org
Subject:   Re: Does pkg check signatures?
Message-ID:  <52D52926.5090104@infracaninophile.co.uk>
In-Reply-To: <52D5269A.5090803@rawbw.com>
References:  <52D5269A.5090803@rawbw.com>

next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--6JP1Q8BpIqmfXPrTxtwES8kh9JfOvSKGF
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On 01/14/14 11:59, Yuri wrote:
> In October announcement has been made that pkg-1.2 will support package=

> signing:
> https://lists.freebsd.org/pipermail/freebsd-pkg/2013-October/000107.htm=
l
> Now I am running 'pkg install' using pkg-1.2.5 on 9.2, and don't see it=

> opening any files related to keys/signatures in ktrace log.

pkg is fully capable of checking cryptographic signatures if configured
to do so.  Specifically you need 'signature-type' and 'fingerprints'
defined in your repo.conf

Try using the standard /etc/pkg/FreeBSD.conf available here:

http://svnweb.freebsd.org/base/head/etc/pkg/FreeBSD.conf?view=3Dlog

and the public key in /usr/share/keys/pkg available here:

http://svnweb.freebsd.org/base/head/share/keys/pkg/trusted/pkg.freebsd.or=
g.2013102301?view=3Dlog

	Cheers,

	Matthew


--6JP1Q8BpIqmfXPrTxtwES8kh9JfOvSKGF
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (FreeBSD)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=HOqR
-----END PGP SIGNATURE-----

--6JP1Q8BpIqmfXPrTxtwES8kh9JfOvSKGF--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?52D52926.5090104>