Subject: Re: adding gpg to src/gnu/dist
To: None <tech-security@NetBSD.org>
From: Love <lha@stacken.kth.se>
List: tech-userlevel
Date: 05/14/2004 21:18:08
--=-=-=


Marc Tooley <netbsdMLpostNO@SPAM.quake.ca> writes:

> Our common users, on the other hand, are probably not even 
> aware that openssl can be used in a package-authenticating manner, let 
> alone how to invoke or interpret the necessary commands.

I'm sure they can run

	$ nbsvtool verify binary_pkg.sp7 && echo woohoo everything ok
	woohoo everything ok

especially when its inside pkg_add so they don't need to run it at all
themself.

Love


--=-=-=
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (NetBSD)

iQEVAwUAQKUbcnW+NPVfDpmCAQL7hQf/cj4vi2j/sUOEiDT2Cf2e5qZTdeNlRz1g
yYlc2Z0cXlZ2JcZwofUxYaB2Z6BTXWglfo+bF8Oiac5YC9sus1sEMZ5xvQ1DP4EZ
V+bLFs3EsR8Yv8JM9qmFclMqzcO/dZ1SEwlIHb16nKBWOrueybwgmtedfL3Hty3G
hTTJSmNYNo8LXODgN/710bMBeoyFmR4nnfLhr0c2m0aup3GEaNSxJEZrY/cHYtC/
jqkeI1SJxMt1wibNjo0WhxhafwJ7lRSA35xX8+v8nTh3MQtXCU3s2luDovDqsvgh
RPANa937RGa95RtXjUfaHGTsLj85tZPM3rIOYXLpT6d949Zhy7WLnw==
=s6ST
-----END PGP SIGNATURE-----
--=-=-=--