You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2009/07/08 12:50:47 UTC
[Bug 6151] New: Sign the distro rules with the right signing key
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6151
Summary: Sign the distro rules with the right signing key
Product: Spamassassin
Version: 3.3.0
Platform: Other
OS/Version: All
Status: NEW
Severity: normal
Priority: P1
Component: Building & Packaging
AssignedTo: dev@spamassassin.apache.org
ReportedBy: Mark.Martinec@ijs.si
Make sure to sign the rules with the right signing key,
and the sa-update failure message should point to
a corresponding URL where this key could be found.
>http://people.apache.org/~jm/devel/
> Mail-SpamAssassin-rules-3.3.0.tgz
> Mail-SpamAssassin-rules-3.3.0.tgz.asc
> Mail-SpamAssassin-rules-3.3.0.tgz.md5
> Mail-SpamAssassin-rules-3.3.0.tgz.sha1
>> That can be installed using "sa-update --install /tmp/709395.tar.gz".
>> Does that work?
Mark:
> Btw, seems like the gpg key used to sign it (265FA05B) is not
> the one the sa-update prints the URL for:
>
> error: GPG validation failed!
> The update downloaded successfully, but it was not signed with a trusted GPG
> key. Instead, it was signed with the following keys:
> 265FA05B
> Perhaps you need to import the channel's GPG key? For example:
> wget http://spamassassin.apache.org/updates/GPG.KEY
> sa-update --import GPG.KEY
Justin:
> That's true -- it's just an example. in this case it's a different key used.
> However in this case we _should_ be using the main rules-signing key,
> not the distro-signing key, so that sa-update doesn't need special
> flags. my mistake. could you open a bug?
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 6151] Sign the distro rules with the right signing key
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6151
Justin Mason <jm...@jmason.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Target Milestone|Undefined |3.3.0
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 6151] Sign the distro rules with the right signing key
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6151
Justin Mason <jm...@jmason.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |FIXED
--- Comment #1 from Justin Mason <jm...@jmason.org> 2009-07-23 07:06:27 PST ---
: 10...; svn commit -m "bug 6151: sign the rules packages with the normal rule
signing key, not the distro packaging key, so sa-update doesn't complain"
build/update_devel_rules
Sending build/update_devel_rules
Transmitting file data .
Committed revision 797044 ( https://svn.apache.org/viewcvs.cgi?view=rev&rev=797044 ).
: 13...; svn commit -m "fix path from ssh" build/update_devel_rules
Sending build/update_devel_rules
Transmitting file data .
Committed revision 797074 ( https://svn.apache.org/viewcvs.cgi?view=rev&rev=797074 ).
done.
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.