Package: debian-archive-keyring
Version: 2010.08.28
Severity: wishlist
Hi,
In the past 'backports.org' was not an official archive, but starting with
Debian 6.0 (squeeze) it is documented as semi-official. For this reason
please add the archive key by default without manual intervention.
Also, w
On Fri, Nov 05, 2010 at 11:32:38AM -0600, Teodor wrote:
> In the past 'backports.org' was not an official archive, but starting with
> Debian 6.0 (squeeze) it is documented as semi-official. For this reason
> please add the archive key by default without manual intervention.
>
> Also, without this
Philipp Kern schrieb am Tuesday, den 09. November 2010:
> On Fri, Nov 05, 2010 at 11:32:38AM -0600, Teodor wrote:
> > In the past 'backports.org' was not an official archive, but starting with
> > Debian 6.0 (squeeze) it is documented as semi-official. For this reason
> > please add the archive ke
Hi,
2010/11/10 Alexander Wirt :
> Teodor MICU schrieb am Wednesday, den 10. November 2010:
>> I don't think that I should manually import a key for any official or
>> semi-official repository from Debian.
> Because its double signed as announced [1]. The double signing will dropped
> soon. As you
Hi!
* Teodor MICU [2010-11-10 11:01:21 CET]:
> 2010/11/10 Alexander Wirt :
> > Because its double signed as announced [1]. The double signing will dropped
> > soon. As you maybe saw you can install packages from backports without that
> > authentication warning.
>
> As far I can see ther
Hi,
* Philipp Kern [2010-11-10 12:40:29 CET]:
> am Wed, Nov 10, 2010 at 12:22:25PM +0100 hast du folgendes geschrieben:
> > You mean laziness like not giving hints in the direction how to do it?
> > Or did I miss something?
>
> laziness of not changing the right files to sign them diffe
Hi,
2010/11/9 Alexander Wirt :
> Ehm this key is deprecated and isn't in use anymore. Nowadays we use the
> normal debian key. So I guess that bugreport can just get closed.
Well, I have these repositories in my local sources.list:
# backports from sid/testing ..
deb http://backports.debian.org/
Teodor MICU schrieb am Wednesday, den 10. November 2010:
> Hi,
>
> 2010/11/9 Alexander Wirt :
> > Ehm this key is deprecated and isn't in use anymore. Nowadays we use the
> > normal debian key. So I guess that bugreport can just get closed.
>
> Well, I have these repositories in my local sources
On Wed, Nov 10, 2010 at 11:44:56AM +0100, Gerfried Fuchs wrote:
> * Teodor MICU [2010-11-10 11:01:21 CET]:
> > 2010/11/10 Alexander Wirt :
> > > Because its double signed as announced [1]. The double signing will
> > > dropped
> > > soon. As you maybe saw you can install packages from backports w
Gerfried,
am Wed, Nov 10, 2010 at 12:22:25PM +0100 hast du folgendes geschrieben:
> * Philipp Kern [2010-11-10 12:18:43 CET]:
> > On Wed, Nov 10, 2010 at 11:44:56AM +0100, Gerfried Fuchs wrote:
> > > Because from what I understood it's not possible to sign different
> > > parts of the archive wi
Hi!
* Philipp Kern [2010-11-10 12:18:43 CET]:
> On Wed, Nov 10, 2010 at 11:44:56AM +0100, Gerfried Fuchs wrote:
> > Because from what I understood it's not possible to sign different
> > parts of the archive with different sets of keys.
>
> Oh, of course it is. Don't be scared of lazin
Hi,
2010/11/10 Gerfried Fuchs :
>> As far I can see there are no packages (yet) in squeeze-backports. Is
>> there a reason to double sign it for squeeze?
>
> Because from what I understood it's not possible to sign different
> parts of the archive with different sets of keys.
Ok, I though that l
reopen 602532
stop
2010/11/10 Teodor MICU :
> I've removed the old deprecated key on a system with Debian 5.0 and
> both lenny-backports and lenny-backports-sloppy enabled but there is a
> warning about the key missing *only* on Debian 6.0. So it seems that
> for lenny the deprecated key is not us
Hi,
2010/11/11 Gerfried Fuchs :
> However, the double signature got removed last night from the
> squeeze-backports release signature. Actually it got removed ages ago,
> but the Release file doesn't get regularly resigned and given that
> uploads to it are still blocked never got resigned. This
Hi!
* Teodor MICU [2010-11-11 10:46:35 CET]:
> 2010/11/11 Gerfried Fuchs :
> > However, the double signature got removed last night from the
> > squeeze-backports release signature. Actually it got removed ages ago,
> > but the Release file doesn't get regularly resigned and given that
>
15 matches
Mail list logo
