[gobolinux-devel] package signing, etc...

[Lucas C. Villa Real]

On 2/17/07, Jonatan Liljedahl <lijon at kymatica.com> wrote:
> When trying to install a package from my old drive:
>
> cd /Mount/HDB/Programs
> InstallPackage ROX-Filer
>
> I get something like this:
>   Traceback:
>   file "<string>", line 9, in ?
>   IOError: Errno 2 no such file or directory: ''
> Invalid signature. Package has been modified
> Suspect package in /Programs/ROX-Filer/2.5
> And then I need to symlinkprogram it manually..
>
> First of all, an invalid signature shouldn't produce a python traceback.
> Also, it would be nice if I could just InstallPackage -S or
> --no-sign-check, I have no reason to check the sign of a package I know
> I created myself and which lives in my own filesystem already...

I've fixed the last known problems on SignPackage/VerifyProgram today,
and now I'm uploading the new packages to the server, which were all
signed and verified in batch mode.

I'll take a look into your patch now.

-- 
Lucas
powered by /dev/dsp