Re: How to guess how to add the key of a repo (GPG, apt-key add,...)

2014-12-10 Thread Andrei POPESCU
On Mi, 10 dec 14, 10:22:28, Mihamina Rakotomandimby wrote:
 Hi all
 
 I have to use a repo: http://open.iabsis.com/debian/
 When adding it in my sources, apt complains about not having GPG key about
 it.
 Would you know how to guess the gpg invocation (server, key,...) in order to
 import it to apt?

Web searching engines are usually very good at finding answers to such 
queries. Searching for add key apt repository I found this.

https://wiki.debian.org/SecureApt#How_to_find_and_add_a_key

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Re: How to guess how to add the key of a repo (GPG, apt-key add,...)

2014-12-10 Thread Mihamina Rakotomandimby

On 12/10/2014 02:19 PM, Andrei POPESCU wrote:


On Mi, 10 dec 14, 10:22:28, Mihamina Rakotomandimby wrote:

Hi all

I have to use a repo: http://open.iabsis.com/debian/
When adding it in my sources, apt complains about not having GPG key about
it.
Would you know how to guess the gpg invocation (server, key,...) in order to
import it to apt?

Web searching engines are usually very good at finding answers to such
queries. Searching for add key apt repository I found this.

https://wiki.debian.org/SecureApt#How_to_find_and_add_a_key

Kind regards,
Andrei


Thank you Andrei, but:

- the key ofhttp://open.iabsis.com/debian/ is not part of 
debian-archive-keyring or debian-keyring, it's a 3rd party repo.

- I gave http://open.iabsis.com/debian/ as an example, but you can imagine any 
other orphaned repository where I find a .deb I like

- the page you told me has the gpg invocation, but how to guess --keyserver and 
--recv-keys parameters value?

Thank you.



Re: How to guess how to add the key of a repo (GPG, apt-key add,...)

2014-12-10 Thread Andrei POPESCU
On Mi, 10 dec 14, 20:20:42, Mihamina Rakotomandimby wrote:
 
 - the key ofhttp://open.iabsis.com/debian/ is not part of 
 debian-archive-keyring or debian-keyring, it's a 3rd party repo.
 
Of course, I wasn't implying it is.

 - I gave http://open.iabsis.com/debian/ as an example, but you can 
 imagine any other orphaned repository where I find a .deb I like

As the wiki says, you might need to hunt for the key.
 
 - the page you told me has the gpg invocation, but how to guess 
 --keyserver and --recv-keys parameters value?

As per 'man gpg', --recv-keys expects a key ID, which will the one apt 
complains about. For the server you can try one of the public servers. 
According to my gpg.conf I seem to be using pgp.mit.edu, but there are 
others.

If the key is not on the keyservers a web search might turn out where to 
get it from, or you could just ask the providers of the software ;)

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Re: How to guess how to add the key of a repo (GPG, apt-key add,...)

2014-12-10 Thread Jochen Spieker
Mihamina Rakotomandimby:
 On 12/10/2014 02:19 PM, Andrei POPESCU wrote:
 
 https://wiki.debian.org/SecureApt#How_to_find_and_add_a_key
…
 - the page you told me has the gpg invocation, but how to guess 
 --keyserver and --recv-keys parameters value?

The only real answer to your question is: the repository provider should
give you these details, especially the key ID (and ideally a fingerprint
if there is a more or less secure way to transmit it, e.g HTTPS).

J.
-- 
Watching television is more hip than actually speaking to anyone.
[Agree]   [Disagree]
 http://www.slowlydownward.com/NODATA/data_enter2.html


signature.asc
Description: Digital signature


How to guess how to add the key of a repo (GPG, apt-key add,...)

2014-12-09 Thread Mihamina Rakotomandimby

Hi all

I have to use a repo: http://open.iabsis.com/debian/
When adding it in my sources, apt complains about not having GPG key 
about it.
Would you know how to guess the gpg invocation (server, key,...) in 
order to import it to apt?


Thank you.