Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] Spell GPG Checking Book Page

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Jason Flatt <jflatt AT sourcemage.org>
  • To: sm-discuss AT lists.ibiblio.org
  • Subject: Re: [SM-Discuss] Spell GPG Checking Book Page
  • Date: Thu, 28 Jul 2005 07:27:04 -0700

On Thursday, July 28, 2005 07:07 am, Jeremy Blosser (emrys) wrote:
> Every file you want downloaded needs to have a SOURCEn, a SOURCEn_URL, and
> a SOURCEn_GPG field in DETAILS. Some of those SOURCEs may be signatures,
> in which case their SOURCEn_GPG field will be "signature", and they will
> themselves be referenced in the SOURCEn_GPG fields of other SOURCEs. GPG
> checking is just done in a way that it works using most of the existing
> sorcery SOURCE mechanisms. Does that make it any clearer? Both of the
> examples he gives are possible. There's nothing special about SOURCE2
> except that in the bottom case it was the next available SOURCEn. In the
> top case you're not downloading the signatures, they're coming bundled with
> the spell, so they local references. If you needed to download them there
> though you'd likely use SOURCE3 and SOURCE4 for the sigs to download since
> those are the next available SOURCEn numbers.

Yes, thank you, that does clarify the issue for me. I guess I was also
confusing the idea about vendor supplied and guru supplied signatures, which
probably didn't help matters. :^)

--
Jason Flatt
Source Mage GNU/Linux: Linux so advanced, it may as well be magic.
http://www.sourcemage.org/
jflatt AT sourcemage.org

Attachment: pgpCtOk4oN6cc.pgp
Description: PGP signature




Archive powered by MHonArc 2.6.24.

Top of Page