On Mon, Oct 08, 2001 at 01:17:16PM +0200, christophe barb? wrote: > le ven 05-10-2001 at 20:37 Colin Watson a ?crit : > > On Fri, Oct 05, 2001 at 04:15:00PM +0200, christophe barb? wrote: > > > Is-it possible to configure apt-get to check package GPG signature > > > before installing it ? > > > > You can install debsig-verify and change /etc/dpkg/dpkg.cfg to say > > 'debsig'. There are very few (none?) signed packages in Debian yet, > > though, and IIRC debsig-verify causes you trouble if you try to install > > unsigned packages. > > Is it planned to require from a package to be signed ? > If it's not mandatory it looks useless.
That's the plan, but we need a transition outline first. I've yet to complete one. -- .----------=======-=-======-=========-----------=====------------=-=-----. / Ben Collins -- Debian GNU/Linux \ ` [EMAIL PROTECTED] -- [EMAIL PROTECTED] -- [EMAIL PROTECTED] ' `---=========------=======-------------=-=-----=-===-======-------=--=---'