Subject: Re: adding gpg to src/gnu/dist
To: None <tech-security@NetBSD.org>
From: Love <lha@stacken.kth.se>
List: tech-security
Date: 05/14/2004 23:04:40
--=-=-=


Marc Tooley <netbsdMLpostNO@SPAM.quake.ca> writes:

> On Friday 14 May 2004 12:18, Love wrote:
>> Marc Tooley <netbsdMLpostNO@SPAM.quake.ca> writes:
>> > Our common users, on the other hand, are probably not even
>> > aware that openssl can be used in a package-authenticating manner,
>> > let alone how to invoke or interpret the necessary commands.
>>
>> I'm sure they can run
>>
>> 	$ nbsvtool verify binary_pkg.sp7 && echo woohoo everything ok
>> 	woohoo everything ok
>>
>> especially when its inside pkg_add so they don't need to run it at
>> all themself.
>>
>> Love
>
> ... which can't be used on other platforms where nbsvtool hasn't been 
> ported or doesn't exist

Come on, porting nbsvtool, less then 400 lines of code, is hardly an
issue. OpenSSL might be harder, but I would think it runs on all platforms
pkgsrc supports.

Love


--=-=-=
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (NetBSD)

iQEVAwUAQKU0bHW+NPVfDpmCAQKXRQgArQNE7TFGgffdVLKcKJn1ZZjIYRZyqrDo
haGnnenmNKmb2/8/PFozWhqbkUglk7Oq+obIpXfjPMY+h3P6QzYP2BcxINVYAvzI
xI0Xtc5z0rJLVXajWZnPguhOsN4lgM5EXXjxORqZ2BEu3/kbMAE3xmXRdBObwnjz
PPBmvDbWOxQqLfX6TFBf1OxbWQHKoiJ9dqe9Vp8JC1moqOjTn9mCHpWFToVljdbe
ZEW51BI8ls4GrN8O56FvAbzCAShdJ7R6tnTS3Iea3TUnzEyDBgXME6AM+XchlNSg
CizS6B9MFkCfzKWy7B+tEN5nHm7BE6kGLepvF4zzRQnz4F7Y9jbF8A==
=O6ve
-----END PGP SIGNATURE-----
--=-=-=--