Bug 323 – archive gpg fingerprint

Bug 323 - archive gpg fingerprint


Summary:	archive gpg fingerprint

Status:	RESOLVED WONTFIX

Product:	Fiji
Classification:	Unclassified
Component:	Debian Packages
Version:	unspecified
Hardware:	PC Linux

Importance:	P2 normal
Assigned To:	Mark Longair

URL:

Depends on:
Blocks:

Reported:	2011-06-11 15:27 CDT by fly
Modified:	2013-07-07 09:48 CDT
CC List:	1 user (show)

See Also:

Description fly 2011-06-11 15:27:04 CDT

Please, add a archive gpg fingerprint to repository.

Right now, you always get warnings about uncertified packages and ubuntu's update-manager does not even allow to update your packages.

Thanks a lot.
fly

Comment 1 Johannes Schindelin 2012-02-27 01:15:41 CST

It is very easy to ask for such a thing.

However, in order to bring about what you desire, you could be of assistance, such as:

- researching exactly what it takes,
- writing up a concise, yet complete, list of instructions how to add such a fingerprint to the repository.

I am afraid that forcing such a fire-and-forget question onto a busy developer takes too much time away from doing what we really want to do: science.

So I am marking this as Won't Fix, but feel free to reopen after doing the research I requested and coming back with those instructions that ensure that we do not have to spend too much time on resolving your itch.

Comment 2 fly 2012-04-19 17:25:37 CDT

Sorry I am no maintainer.

Please have a look at:
http://blog.mycrot.ch/2011/04/26/creating-your-own-signed-apt-repository-and-debian-packages/
for example.

Basicly you need a gpg-key for the maintainer's mail address and put the public part in the repo.
The package building tools should automatically use the key.

Cheers

Comment 3 Johannes Schindelin 2012-04-20 23:35:21 CDT

Thank you for the research. Mark, can you add the fingerprint?

Comment 4 Johannes Schindelin 2013-07-07 09:48:02 CDT

Unfortunately, we had to stop supporting the Debian packaging (it costs too much time).