Bug#763419: apt ignoring check-valid-until flag

2020-12-18 Thread Ansgar
On Fri, 2020-12-18 at 01:15 +, Paul Wise wrote: > On Thu, Dec 17, 2020 at 10:03 AM Ansgar wrote: > >     (Bonus points if this keeps the original signature if > > possible.) > > Two separate signatures is possible for Release+Release.gpg, just > rename the latter to .old, but what can you do

Bug#763419: apt ignoring check-valid-until flag

2020-12-17 Thread Calum McConnell
On Fri, 2020-12-18 at 01:15 +, Paul Wise wrote: > On Thu, Dec 17, 2020 at 10:03 AM Ansgar wrote: > > >     (Bonus points if this keeps the original signature if possible.) > > Two separate signatures is possible for Release+Release.gpg, just > rename the latter to .old, but what can you do

Bug#763419: apt ignoring check-valid-until flag

2020-12-17 Thread Paul Wise
On Thu, Dec 17, 2020 at 10:03 AM Ansgar wrote: > (Bonus points if this keeps the original signature if possible.) Two separate signatures is possible for Release+Release.gpg, just rename the latter to .old, but what can you do for InRelease? Is it possible to have multiple signatures in one

Bug#763419: apt ignoring check-valid-until flag

2020-12-17 Thread John Paul Adrian Glaubitz
Hi Ansgar! On 12/17/20 11:02 AM, Ansgar wrote: > Maybe the same could be done for archive.d.o? > > I might be interested to experiment with this as it seems reasonably > small project to implement. :-) That would be fantastic and a huge improvement in user experience. Adrian -- .''`. John

Bug#763419: apt ignoring check-valid-until flag

2020-12-17 Thread Ansgar
On Thu, 2020-12-17 at 00:47 +0100, John Paul Adrian Glaubitz wrote: > On 12/17/20 12:36 AM, Paul Wise wrote: > >  * snapshot could gain a re-signing service (#763419) > > That would be absolutely awesome. Whom do I throw my money at? It doesn't seem too complicated to implement and could be