GNU bug report logs - #17625
details of package signing mechanism

Previous Next

Package: emacs;

Reported by: Eric Abrahamsen <eric <at> ericabrahamsen.net>

Date: Thu, 29 May 2014 03:12:01 UTC

Severity: important

Tags: security

Found in version 24.4.50

Done: Stefan Monnier <monnier <at> iro.umontreal.ca>

Bug is archived. No further changes may be made.

Full log

View this message in rfc822 format

From: Daiki Ueno <ueno <at> gnu.org>
To: Stefan Monnier <monnier <at> iro.umontreal.ca>
Cc: 17625 <at> debbugs.gnu.org
Subject: bug#17625: 24.4.50; All installed packages marked "unsigned", no archive listed
Date: Fri, 27 Jun 2014 09:47:06 +0900

Stefan Monnier <monnier <at> iro.umontreal.ca> writes:

> - Keep track of which archives have signatures and which don't (e.g. by
>   assuming that if `archive-contents' has a sig, then the packages also
>   have sigs).

This sounds like a good heuristic (like the way YUM does, IIRC).  It can
reduce the number of confirmations.
This bug report was last modified 10 years and 236 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.