[Kune - Defect #407] (New) Sign deb package
Issue #407 has been reported by Samer -. ---------------------------------------- Defect #407: Sign deb package http://redmine.ourproject.org/issues/407 * Author: Samer - * Status: New * Priority: Normal * Assignee: * Category: Others * Target version: * Resolution: * Tags: ---------------------------------------- The deb package is distributed unsigned. The APT repository and the Debian packages should be signed. Ref: http://blog.mycrot.ch/2011/04/26/creating-your-own-signed-apt-repository-and... -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://redmine.ourproject.org/my/account
Issue #407 has been updated by Samer -. I tried to approach this but I got stuck. I thought we should sign the packages with a generic key for Kune (like Ubuntu does) so I created a GPG RSA key for kune@op just for signing (not for encrypting). However, later the instructions say that, in order to do it automatically: "your packages will be automatically signed as long as the name and email address in your package’s changelog file are the same as that of the GPG key you created" As the changelog usually has vjrj's name and email, then I wonder that, to avoid complications and being able to do it automatically, we should sign the package with his key. * If we do, then I'd discard the created Kune key and wait till vjrj does it. * If we don't, then i'd continue working on this with the Kune key I created (uploading it to the key repository, signing, etc). ---------------------------------------- Defect #407: Sign deb package http://redmine.ourproject.org/issues/407#change-525 * Author: Samer - * Status: New * Priority: Normal * Assignee: * Category: Others * Target version: * Resolution: * Tags: ---------------------------------------- The deb package is distributed unsigned. The APT repository and the Debian packages should be signed. Ref: http://blog.mycrot.ch/2011/04/26/creating-your-own-signed-apt-repository-and... -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://redmine.ourproject.org/my/account
Issue #407 has been updated by Vicente J. Ruiz Jurado. Estimated time set to 0.00 I think is a good path to follow, but, the goal is that ci.comunes.org do this task automatically (now the deb is generated there) and should copy the packages to the repo. The package is manual signed with my key (see the kune deb install howto to import it), because I didn't put the necessary effort to finish all the path and configure ci.comunes.org end task. ---------------------------------------- Defect #407: Sign deb package http://redmine.ourproject.org/issues/407#change-527 * Author: Samer - * Status: New * Priority: Normal * Assignee: * Category: Others * Target version: * Resolution: * Tags: ---------------------------------------- The deb package is distributed unsigned. The APT repository and the Debian packages should be signed. Ref: http://blog.mycrot.ch/2011/04/26/creating-your-own-signed-apt-repository-and... -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://redmine.ourproject.org/my/account
Issue #407 has been updated by Vicente J. Ruiz Jurado. Tracker changed from Defect to Enhancement ---------------------------------------- Enhancement #407: Sign deb package http://redmine.ourproject.org/issues/407#change-621 * Author: Samer - * Status: New * Priority: Normal * Assignee: * Category: Others * Target version: * Resolution: * Tags: ---------------------------------------- The deb package is distributed unsigned. The APT repository and the Debian packages should be signed. Ref: http://blog.mycrot.ch/2011/04/26/creating-your-own-signed-apt-repository-and... -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://redmine.ourproject.org/my/account
participants (1)
-
Redmine Comunes