Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #225205

Re: Verifying authenticity of Debian CDs

Path csiph.com!weretis.net!feeder7.news.weretis.net!news.mixmin.net!aioe.org!bofh.it!news.nic.it!robomod
From Andrew Cater <amacater@gmail.com>
Newsgroups linux.debian.user
Subject Re: Verifying authenticity of Debian CDs
Date Fri, 24 Jul 2020 18:40:02 +0200
Message-ID <Aw8TL-194-9@gated-at.bofh.it> (permalink)
References <Aw8h4-FU-5@gated-at.bofh.it> <Aw8K6-15L-7@gated-at.bofh.it>
X-Mailbox-Line From debian-user-request@lists.debian.org Fri Jul 24 16:30:04 2020
Old-Return-Path <amacater@gmail.com>
X-Amavis-Spam-Status No, score=-2.199 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, BLOGSPOT=3, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=2, LDO_WHITELIST=-5, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no autolearn_force=no
X-Policyd-Weight using cached result; rate: -5.5
Dkim-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=z2x1rUufVhpuLofaFWmusuEwATMweXqtl2VgWuUDGn8=; b=Xr7lfo956kCmTsZMIBJMKdhoVIb8lxmhiUBDhLKT5ox3EXI5zZMKSUkL6pz3GpXm/0 SkbhxEVxxCf0+Q8syBBBL/5SoZv/L2GTGB3YAEFNRYN76IC8pKdX0NKY+PaIcTNUbl9A cRu4sctviyxacCdHe7jLLklTZebfPhpwiuOpHmQE+By2H/9IAmorjcASNBghpi/4pk/I 9R+o4xvX8eF4f6Vv1RQ4dhj05khK1oPHu6hbgSov291SbOYZJyb2bfuZb8Wi5JozsM9p zBesFiC1aevmeo/8NO3ZjrbmHhlavkV2vUot6IvwkzgKXh5dI/ximutHxaqc8klpHWPU 4v9w==
X-Google-Dkim-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=z2x1rUufVhpuLofaFWmusuEwATMweXqtl2VgWuUDGn8=; b=YjAxWK9KMhDdCRnPw5j47TqlRvRVdNCcoCRhHmh9EYGuBbvW9iBVMW/7iYjxM5P9vM W8ewYjKcwt6WUiYfgWQyxu/TQz99poOYktDxjaK2Fp3pITH0bcrVa3iYSbZA6DnnDJkp 888QMFZVvunr9SEJ1X3X3rXeRE+eTXgh8FVD3tPUj+UdG/JdtOT+HrqoJM8kr3rP6Jyo xg2sKV3bMjFMVaIJGHwTDm3WhZWP1sCJR5Jh9Uq2bahUsVaC5XPOJAwaMo4Es6QTrKw8 FRx9Q5pHJfpqU8ddOHl5Fhr+6ml1MM0ohl3//Q58K10J+rz2KfuDPTIqW6taW3MSSA/h 65BA==
X-Gm-Message-State AOAM5322vzHc6QZxAgXXhg4uDi6m6KVl16jlYNMw/qd0sU3KYdanr7o9 SgFAaoyNcRRH5dcZ6dZ8WCzTkoI7xedFwk7wOGSLh1zlyhg=
X-Google-SMTP-Source ABdhPJzmV/tsvWIu+zZszYnNBVpkRn69ZUNsBEIFukETUEm5qVSSK6G36NK5UmsGPEWrMqn1Fdy/lMzdeFctp1VW5qA=
X-Received by 2002:a17:907:94c9:: with SMTP id dn9mr9655083ejc.355.1595608189050; Fri, 24 Jul 2020 09:29:49 -0700 (PDT)
MIME-Version 1.0
Content-Type multipart/alternative; boundary="0000000000004f263905ab327b20"
X-Mailing-List <debian-user@lists.debian.org> archive/latest/765530
List-ID <debian-user.lists.debian.org>
List-URL <https://lists.debian.org/debian-user/>
List-Archive https://lists.debian.org/msgid-search/CALtr+3nLU1WS5zBpnkotyFcoKX67=G9yud1hMeexKEj_W8tDQw@mail.gmail.com
Approved robomod@news.nic.it
Lines 60
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Cc Debian User ML <debian-user@lists.debian.org>
X-Original-Date Fri, 24 Jul 2020 16:29:37 +0000
X-Original-Message-ID <CALtr+3nLU1WS5zBpnkotyFcoKX67=G9yud1hMeexKEj_W8tDQw@mail.gmail.com>
X-Original-References <CAFi06wcen4BspjTo9nU4vUere9w09z-4OtOgttJL3wGD80Toqg@mail.gmail.com> <jwveep0sx62.fsf-monnier+gmane.linux.debian.user@gnu.org>
Xref csiph.com linux.debian.user:225205

Show key headers only | View raw


[Multipart message — attachments visible in raw view] - view raw

I've just written up longer instructions on my own web page at FLOSSlinux
<https://flosslinuxblog.blogspot.com/> which should explain the steps I've
just followed for myself. Check those and see what you think. I'll have a
go at importing from /etc/apt/trusted.gpg and see what that looks like.
That, of course, is the keyring that apt and aptitude use for master
verification of Debian packages as part of the verification process before
package installation - so the master keys for the whole of the trust for
package installation on a Debian system.

On Fri, Jul 24, 2020 at 4:20 PM Stefan Monnier <monnier@iro.umontreal.ca>
wrote:

> > when I run the command
> > gpg --verify SHAxSUM.sign SHAxSUM
> > I get a message saying that
> >
> > Can't check signature: No public key
>
> You should have the needed key(s) in /etc/apt/trusted.gpg, but to be
> honest I don't know how to best pass those to GPG.
>
>
>         Stefan
>
>

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Verifying authenticity of Debian CDs Semih Ozlem <semihozlemlinuxuser@gmail.com> - 2020-07-24 18:00 +0200
  Re: Verifying authenticity of Debian CDs john doe <johndoe65534@mail.com> - 2020-07-24 18:10 +0200
    Re: Verifying authenticity of Debian CDs john doe <johndoe65534@mail.com> - 2020-07-24 18:40 +0200
  Re: Verifying authenticity of Debian CDs Stefan Monnier <monnier@iro.umontreal.ca> - 2020-07-24 18:30 +0200
    Re: Verifying authenticity of Debian CDs Andrew Cater <amacater@gmail.com> - 2020-07-24 18:40 +0200
      Re: Verifying authenticity of Debian CDs davidson <davidson@freevolt.org> - 2020-07-28 12:00 +0200
    Re: Verifying authenticity of Debian CDs Andrew Cater <amacater@gmail.com> - 2020-07-24 18:40 +0200
    Re: Verifying authenticity of Debian CDs davidson <davidson@freevolt.org> - 2020-07-28 11:50 +0200

csiph-web