Re: Checking Signatures and Checksums

2002-09-03 Thread Marcel Weber
Sorry for not reading the first mail in it's full length. Yes, the release file issue isn't resolved yet, as far as I know. And sorry for posting to all these mailing lists, I did not check the mail before sending, but just hit, reply to all. Posting a message to more than one list is BAD BEHA

Re: Checking Signatures and Checksums

2002-09-03 Thread Marcel Weber
Hi As I remember we had this discussion already. My latest knowledge is, if you install debsig-verify, debsigs and debian-keyring you get the feature requested. As the dpkg used in woody checks if debsig-verify is installed and if so checks the signatures of the packages you want to install. I

Re: Checking Signatures and Checksums

2002-09-03 Thread Colin Watson
On Tue, Sep 03, 2002 at 09:38:28AM +0200, Javier Fern?ndez-Sanguino Pe?a wrote: > On Tue, Sep 03, 2002 at 07:18:08AM +, Aurelio Turco wrote: > > My question is this: Is there another script (for verifying signed > > releases) that can be used in conjunction with dselect? > > (Yes, there are pe

Re: Checking Signatures and Checksums

2002-09-03 Thread Javier Fernández-Sanguino Peña
On Tue, Sep 03, 2002 at 07:18:08AM +, Aurelio Turco wrote: > > My question is this: Is there another script (for verifying signed > releases) that can be used in conjunction with dselect? > (Yes, there are people who prefer to use dselect over apt-get!) > Umm... you are right in you

Checking Signatures and Checksums

2002-09-02 Thread Aurelio Turco
In the Debian Weekly News of 2001/03/14 (http://www.debian.org/News/weekly/2001/8/) Joey Hess wrote: For years we've known that Debian's means of getting packages and releases out to users is lacking from a security standpoint. There has been no way to know that the package you just downloa