[ubuntu-hardened] synaptic

[Peter Pun]

What happens when it fails to find a Release.gpg on the server ? Does it
warn you that it is not signed? Must every application be signed when
released to Ubuntu ? How does Synaptic tell the difference between an
application which was never signed ?





On 12/6/05, Christian Bjälevik <nafallo at magicalforest.se> wrote:
>
> mån 2005-12-05 klockan 13:47 -0500 skrev Peter Pun:
> > Hi,
> >
> > Does Synaptic authenticate all packagaes ? Or are only packages named
> > "something-ubuntu" authenticated? Does it use gpg and md5 ?
> >
> > Peter
>
> It tries to authenticate everything, but it will only succeed if there
> is a Release.gpg on the mirror/repo.
>
> Sincerely, /C
> --
> Christian Bjälevik <nafallo at ubuntu.com>
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.2 (GNU/Linux)
>
> iD8DBQBDlbmvLdqCW1CcunERAgw0AKCSHFmKKkcE4yHkgJFRx6PWMvKA1wCffh6f
> NZRFOL40REzt2yT9XAZBoVE=
> =MOmm
> -----END PGP SIGNATURE-----
>
>
> --
> ubuntu-hardened mailing list
> ubuntu-hardened at lists.ubuntu.com
> http://lists.ubuntu.com/mailman/listinfo/ubuntu-hardened
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.ubuntu.com/archives/ubuntu-hardened/attachments/20051229/e374614a/attachment.htm