Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #225204
| Path | csiph.com!3.eu.feeder.erje.net!feeder.erje.net!usenet.goja.nl.eu.org!aioe.org!bofh.it!news.nic.it!robomod |
|---|---|
| From | Andrew Cater <amacater@gmail.com> |
| Newsgroups | linux.debian.user |
| Subject | Re: Verifying authenticity of Debian CDs |
| Date | Fri, 24 Jul 2020 18:40:02 +0200 |
| Message-ID | <Aw8TL-194-7@gated-at.bofh.it> (permalink) |
| References | <Aw8h4-FU-5@gated-at.bofh.it> <Aw8K6-15L-7@gated-at.bofh.it> <Aw8TL-194-9@gated-at.bofh.it> |
| X-Mailbox-Line | From debian-user-request@lists.debian.org Fri Jul 24 16:38:56 2020 |
| Old-Return-Path | <amacater@gmail.com> |
| X-Amavis-Spam-Status | No, score=-2.199 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, BLOGSPOT=3, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=2, LDO_WHITELIST=-5, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no autolearn_force=no |
| X-Policyd-Weight | using cached result; rate: -5.5 |
| Dkim-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=NrQm6i19l3NJKDrpwvjUKwI82ZYDOopWBxifs/BsyfU=; b=Jubr9jpgQc6m9JkjFuGxJkG4VGbi8C4v6Hc2yFfDQEAcSgMLJexheIj9Gb3qhuA4Us imSNZxdWekS5hWmNXzKLsw906RSfbh79Q89oDXeKrTPZ7/YfWbqvdZnzbN3YZQERZXtN YSoshmEXFre7YeTv3d4PLbOI0PTcln5XEI2bULcM89E7n82GqOLwKctsbf1gAavQusN1 io7Gm4mdR/MoroJhVRTyl8UKJ6v45M/rEV64rypbM9Qgmnk56Alyo3OgHLDf5PCUgjsq aYM1kxPv5mevWFM3caW0fKMOJFbPD7lu2iFcZXSRjeRSlojWlBR3HRNOduHpzCRWNlsw FEmQ== |
| X-Google-Dkim-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=NrQm6i19l3NJKDrpwvjUKwI82ZYDOopWBxifs/BsyfU=; b=Bsm2sYdHeT1AumkKBcsbckcpb+nTSATprRCHOTHpa9v6hXnkvO/k0HxZwhb9mGG6jm mVCe4pX1RtvKwsf4Lbk/o2ExVKIPWqbjoc5NRCL0dC+CaRhpA0iUIWPtHC6EwRIsUuIv d7Z40yUlirnwdBe9cpNlKBFfayLfZoiBfO/3ORZ15NrLbrb4tuv2FMdTJhu84/r2guVO tlrKKE6EXbN4gZ3jwHhVL3n6a4dsixSwGk7d78viOPC/R/vhLcy7p2utnLI9Gr7QG8Oe qBXfmPgp5YitdPqOTRiJURKQQ/GbFKnLFfE6UORiQ8cyZAtcqF7C/qTIGuihqpI24Q3l Ruww== |
| X-Gm-Message-State | AOAM5320BXeU8UAze9wbQzII4AmtZUyxFVre6q5ceWoQ+6wfd/S0xj9a EvjUWruC6CBxWdLPfHZs2LakQWgupsHRU0LJWSk= |
| X-Google-SMTP-Source | ABdhPJy/OL6dSuYxfZ3cAqsUzoGwh30uGLmSms/CU1cHcgwvOrDNPeZwBkMqwOzVjqBvF+XrpNp2UyfWvfpT3JcQbdE= |
| X-Received | by 2002:aa7:d285:: with SMTP id w5mr10106121edq.174.1595608720352; Fri, 24 Jul 2020 09:38:40 -0700 (PDT) |
| MIME-Version | 1.0 |
| Content-Type | multipart/alternative; boundary="000000000000fa279705ab329a4d" |
| X-Mailing-List | <debian-user@lists.debian.org> archive/latest/765531 |
| List-ID | <debian-user.lists.debian.org> |
| List-URL | <https://lists.debian.org/debian-user/> |
| List-Archive | https://lists.debian.org/msgid-search/CALtr+3m2j9NW2=XwC2RmPXLg+zBMD6=ErewYgE7a+-rjxe=SUw@mail.gmail.com |
| Approved | robomod@news.nic.it |
| Lines | 82 |
| Organization | linux.* mail to news gateway |
| Sender | robomod@news.nic.it |
| X-Original-Cc | Debian User ML <debian-user@lists.debian.org> |
| X-Original-Date | Fri, 24 Jul 2020 16:38:28 +0000 |
| X-Original-Message-ID | <CALtr+3m2j9NW2=XwC2RmPXLg+zBMD6=ErewYgE7a+-rjxe=SUw@mail.gmail.com> |
| X-Original-References | <CAFi06wcen4BspjTo9nU4vUere9w09z-4OtOgttJL3wGD80Toqg@mail.gmail.com> <jwveep0sx62.fsf-monnier+gmane.linux.debian.user@gnu.org> <CALtr+3nLU1WS5zBpnkotyFcoKX67=G9yud1hMeexKEj_W8tDQw@mail.gmail.com> |
| Xref | csiph.com linux.debian.user:225204 |
Show key headers only | View raw
[Multipart message — attachments visible in raw view] - view raw
And it turns out that /etc/apt/trusted.gpg has the buster-stable, the buster-automatic and the buster-security keys by default but _NOT_ the debian-cd signing key so the stage of importing the key to match the specific Debian CD signing key is still valid. All best, as ever, Andy C. On Fri, Jul 24, 2020 at 4:29 PM Andrew Cater <amacater@gmail.com> wrote: > I've just written up longer instructions on my own web page at FLOSSlinux > <https://flosslinuxblog.blogspot.com/> which should explain the steps > I've just followed for myself. Check those and see what you think. I'll > have a go at importing from /etc/apt/trusted.gpg and see what that looks > like. That, of course, is the keyring that apt and aptitude use for master > verification of Debian packages as part of the verification process before > package installation - so the master keys for the whole of the trust for > package installation on a Debian system. > > On Fri, Jul 24, 2020 at 4:20 PM Stefan Monnier <monnier@iro.umontreal.ca> > wrote: > >> > when I run the command >> > gpg --verify SHAxSUM.sign SHAxSUM >> > I get a message saying that >> > >> > Can't check signature: No public key >> >> You should have the needed key(s) in /etc/apt/trusted.gpg, but to be >> honest I don't know how to best pass those to GPG. >> >> >> Stefan >> >>
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Verifying authenticity of Debian CDs Semih Ozlem <semihozlemlinuxuser@gmail.com> - 2020-07-24 18:00 +0200
Re: Verifying authenticity of Debian CDs john doe <johndoe65534@mail.com> - 2020-07-24 18:10 +0200
Re: Verifying authenticity of Debian CDs john doe <johndoe65534@mail.com> - 2020-07-24 18:40 +0200
Re: Verifying authenticity of Debian CDs Stefan Monnier <monnier@iro.umontreal.ca> - 2020-07-24 18:30 +0200
Re: Verifying authenticity of Debian CDs Andrew Cater <amacater@gmail.com> - 2020-07-24 18:40 +0200
Re: Verifying authenticity of Debian CDs davidson <davidson@freevolt.org> - 2020-07-28 12:00 +0200
Re: Verifying authenticity of Debian CDs Andrew Cater <amacater@gmail.com> - 2020-07-24 18:40 +0200
Re: Verifying authenticity of Debian CDs davidson <davidson@freevolt.org> - 2020-07-28 11:50 +0200
csiph-web