LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Debian
User Name
Password
Debian This forum is for the discussion of Debian Linux.

Notices


Reply
  Search this Thread
Old 12-24-2008, 10:56 PM   #1
JivanAmara
LQ Newbie
 
Registered: Nov 2007
Posts: 15

Rep: Reputation: 1
Repository with unsigned packages.


Hi Everyone,
I used apt-spy to find a fast repository near me, but have found that it doesn't sign its packages, at least not using any keyring listed in aptitude.

The repository is 'www.anheng.com.cn', and I was trying to use it for lenny packages. Is it appropriate to report this as a bug in the apt-spy package?

Cheers,

Jivan

Last edited by JivanAmara; 12-24-2008 at 10:58 PM. Reason: Missing Info
 
Old 12-25-2008, 05:19 AM   #2
Junior Hacker
Senior Member
 
Registered: Jan 2005
Location: North America
Distribution: Debian testing Mandriva Ubuntu
Posts: 2,687

Rep: Reputation: 61
Quote:
Originally Posted by JivanAmara View Post
Is it appropriate to report this as a bug in the apt-spy package?
Probably not, it's in the Debian mirrors list, which means it should be using default key.
 
Old 12-27-2008, 07:43 AM   #3
JivanAmara
LQ Newbie
 
Registered: Nov 2007
Posts: 15

Original Poster
Rep: Reputation: 1
Quote:
Originally Posted by Junior Hacker View Post
Probably not, it's in the Debian mirrors list, which means it should be using default key.
That's the point...I've got the usual keyrings installed, and if I use other repositories there is no problem. The debian team is pretty thorough and interested in security. Should a repository that isn't signing its packages be on the mirrors list?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
unsigned long int uint32_t to unsigned char and back MicahCarrick Programming 2 08-02-2009 02:39 AM
Is there a repository for Mandriva packages? Alina_B Mandriva 2 12-11-2006 07:17 AM
How to force install of unsigned packages with Synaptic Elong SUSE / openSUSE 6 03-15-2006 10:35 PM
FC4: up2date has unsigned packages??? RottenMutt Fedora 5 07-08-2005 12:28 PM
convert unsigned char * to unsigned long int linux_lover2005 Programming 3 04-27-2005 12:38 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Debian

All times are GMT -5. The time now is 04:10 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration