On 9-Dec-2008, at 23:11, Theo Van Dinter wrote:
On Tue, Dec 09, 2008 at 10:54:23PM -0700, LuKreme wrote:
curl -o sa.gpg http://spamassassin.apache.org/updates/GPG.KEY
echo "24F434CE" >> gpg.keys
sa-update --import sa.gpg
echo "updates.spamassassin.org" >> channel.list
The three lines that are echo "HEXCODE" >> gpg.keys are the issue for
me, I guess. Where do those numbers come from?
They're the keyids for the given channels you're using. The channel
publishers should state the keyid in use for the channel. You need
to specify them so that when sa-update checks the signature on the
update file, it will know what keyid to consider valid, which
protects you from someone else creating a channel update file and
signing it with another random key.
Ok, where in those directions are you supposed to find the keyid?
--
Growing up leads to growing old, and then to dying/And dying to me
don't sound like all that much fun.
