public inbox for openembedded-core@lists.openembedded.org
 help / color / mirror / Atom feed
* signing ipk packages
@ 2013-01-15 14:37 Jaap de Jong
  2013-01-16 12:04 ` Richard Purdie
  0 siblings, 1 reply; 4+ messages in thread
From: Jaap de Jong @ 2013-01-15 14:37 UTC (permalink / raw)
  To: openembedded-core@lists.openembedded.org

Hi All,
is it possible to sign ipk packages?
I've seen that it is possible to add a file called '_signature' to a 
package.
No idea how the process looks.
Anyone an idea or perhaps a pointer where to look?
Cheers!



^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: signing ipk packages
  2013-01-15 14:37 signing ipk packages Jaap de Jong
@ 2013-01-16 12:04 ` Richard Purdie
  2013-01-17 13:57   ` Steve Sakoman
  0 siblings, 1 reply; 4+ messages in thread
From: Richard Purdie @ 2013-01-16 12:04 UTC (permalink / raw)
  To: Jaap de Jong; +Cc: openembedded-core@lists.openembedded.org

On Tue, 2013-01-15 at 15:37 +0100, Jaap de Jong wrote:
> Hi All,
> is it possible to sign ipk packages?
> I've seen that it is possible to add a file called '_signature' to a 
> package.
> No idea how the process looks.
> Anyone an idea or perhaps a pointer where to look?

Look at opkg and its gpg support. We don't enable it by default as
nobody was using it and it causes unnecessary dependencies. I think
Steve Sakoman may have posted something in the archives about his
experiences but I'm not 100% sure.

Cheers,

Richard




^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: signing ipk packages
  2013-01-16 12:04 ` Richard Purdie
@ 2013-01-17 13:57   ` Steve Sakoman
  2013-01-17 14:05     ` Richard Purdie
  0 siblings, 1 reply; 4+ messages in thread
From: Steve Sakoman @ 2013-01-17 13:57 UTC (permalink / raw)
  To: Richard Purdie; +Cc: openembedded-core@lists.openembedded.org

On Wed, Jan 16, 2013 at 4:04 AM, Richard Purdie
<richard.purdie@linuxfoundation.org> wrote:

> Steve Sakoman may have posted something in the archives about his
> experiences but I'm not 100% sure.

Richard - I'm using signed rpm repositories, haven't done anything with ipk!

Steve



^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: signing ipk packages
  2013-01-17 13:57   ` Steve Sakoman
@ 2013-01-17 14:05     ` Richard Purdie
  0 siblings, 0 replies; 4+ messages in thread
From: Richard Purdie @ 2013-01-17 14:05 UTC (permalink / raw)
  To: Steve Sakoman; +Cc: openembedded-core@lists.openembedded.org

On Thu, 2013-01-17 at 05:57 -0800, Steve Sakoman wrote:
> On Wed, Jan 16, 2013 at 4:04 AM, Richard Purdie
> <richard.purdie@linuxfoundation.org> wrote:
> 
> > Steve Sakoman may have posted something in the archives about his
> > experiences but I'm not 100% sure.
> 
> Richard - I'm using signed rpm repositories, haven't done anything with ipk!

Sorry for the noise, my memory clearly wasn't 100% right! ;-)

Jaap: In that case the last people to use opkg package signing were
probably openmoko so you could look at those mailing lists posts...

Cheers,

Richard




^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2013-01-17 14:21 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-01-15 14:37 signing ipk packages Jaap de Jong
2013-01-16 12:04 ` Richard Purdie
2013-01-17 13:57   ` Steve Sakoman
2013-01-17 14:05     ` Richard Purdie

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox