Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 598276

Summary: app-portage/emerge-delta-webrsync: use app-crypt/gkeys to automatically establish trust for gpg signature verification
Product: Portage Development Reporter: Zac Medico <zmedico>
Component: Enhancement/Feature RequestsAssignee: Portage team <dev-portage>
Status: RESOLVED FIXED    
Severity: normal CC: treecleaner
Priority: Normal Keywords: PMASKED
Version: 2.2   
Hardware: All   
OS: All   
See Also: https://bugs.gentoo.org/show_bug.cgi?id=689506
Whiteboard:
Package list:
Runtime testing required: ---
Bug Depends on: 598290    
Bug Blocks:    
Deadline: 2020-05-19   

Description Zac Medico gentoo-dev 2016-10-27 19:41:37 UTC
We need to merge the emerge-webrsync changes from bug 597918.
Comment 1 Zac Medico gentoo-dev 2016-10-27 20:27:01 UTC
I've started a patch here but it's untested:

https://github.com/zmedico/portage/tree/bug_598276

I suspect the [[ ${signature} != ${file}.gpgsig ]] think may fail in some cases.
Comment 2 Zac Medico gentoo-dev 2016-10-27 21:38:40 UTC
(In reply to Zac Medico from comment #1)
> I suspect the [[ ${signature} != ${file}.gpgsig ]] think may fail in some
> cases.

The gkeys patch for bug 598290 will solve this.
Comment 3 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2020-04-19 12:12:29 UTC
app-crypt/gkeys is last rited now.
Comment 4 Zac Medico gentoo-dev 2020-04-19 19:02:41 UTC
By default, we use gemato for key refresh since bug 689506.