Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #225204

Re: Verifying authenticity of Debian CDs

From Andrew Cater <amacater@gmail.com>
Newsgroups linux.debian.user
Subject Re: Verifying authenticity of Debian CDs
Date 2020-07-24 18:40 +0200
Message-ID <Aw8TL-194-7@gated-at.bofh.it> (permalink)
References <Aw8h4-FU-5@gated-at.bofh.it> <Aw8K6-15L-7@gated-at.bofh.it> <Aw8TL-194-9@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

And it turns out that /etc/apt/trusted.gpg has the buster-stable, the
buster-automatic and the buster-security keys by default but _NOT_ the
debian-cd signing key so the stage of importing the key to match the
specific Debian CD signing key is still valid.

All best, as ever,

Andy C.

On Fri, Jul 24, 2020 at 4:29 PM Andrew Cater <amacater@gmail.com> wrote:

> I've just written up longer instructions on my own web page at FLOSSlinux
> <https://flosslinuxblog.blogspot.com/> which should explain the steps
> I've just followed for myself. Check those and see what you think. I'll
> have a go at importing from /etc/apt/trusted.gpg and see what that looks
> like. That, of course, is the keyring that apt and aptitude use for master
> verification of Debian packages as part of the verification process before
> package installation - so the master keys for the whole of the trust for
> package installation on a Debian system.
>
> On Fri, Jul 24, 2020 at 4:20 PM Stefan Monnier <monnier@iro.umontreal.ca>
> wrote:
>
>> > when I run the command
>> > gpg --verify SHAxSUM.sign SHAxSUM
>> > I get a message saying that
>> >
>> > Can't check signature: No public key
>>
>> You should have the needed key(s) in /etc/apt/trusted.gpg, but to be
>> honest I don't know how to best pass those to GPG.
>>
>>
>>         Stefan
>>
>>

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Verifying authenticity of Debian CDs Semih Ozlem <semihozlemlinuxuser@gmail.com> - 2020-07-24 18:00 +0200
  Re: Verifying authenticity of Debian CDs john doe <johndoe65534@mail.com> - 2020-07-24 18:10 +0200
    Re: Verifying authenticity of Debian CDs john doe <johndoe65534@mail.com> - 2020-07-24 18:40 +0200
  Re: Verifying authenticity of Debian CDs Stefan Monnier <monnier@iro.umontreal.ca> - 2020-07-24 18:30 +0200
    Re: Verifying authenticity of Debian CDs Andrew Cater <amacater@gmail.com> - 2020-07-24 18:40 +0200
      Re: Verifying authenticity of Debian CDs davidson <davidson@freevolt.org> - 2020-07-28 12:00 +0200
    Re: Verifying authenticity of Debian CDs Andrew Cater <amacater@gmail.com> - 2020-07-24 18:40 +0200
    Re: Verifying authenticity of Debian CDs davidson <davidson@freevolt.org> - 2020-07-28 11:50 +0200

csiph-web