Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 598276 - app-portage/emerge-delta-webrsync: use app-crypt/gkeys to automatically establish trust for gpg signature verification
Summary: app-portage/emerge-delta-webrsync: use app-crypt/gkeys to automatically estab...
Status: RESOLVED FIXED
Alias: None
Product: Portage Development
Classification: Unclassified
Component: Enhancement/Feature Requests (show other bugs)
Hardware: All All
: Normal normal (vote)
Deadline: 2020-05-19
Assignee: Portage team
URL:
Whiteboard:
Keywords: PMASKED
Depends on: 598290
Blocks:
  Show dependency tree
 
Reported: 2016-10-27 19:41 UTC by Zac Medico
Modified: 2020-04-19 19:02 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Zac Medico gentoo-dev 2016-10-27 19:41:37 UTC 
We need to merge the emerge-webrsync changes from bug 597918.
Comment 1 Zac Medico gentoo-dev 2016-10-27 20:27:01 UTC 
I've started a patch here but it's untested:

https://github.com/zmedico/portage/tree/bug_598276

I suspect the [[ ${signature} != ${file}.gpgsig ]] think may fail in some cases.
Comment 2 Zac Medico gentoo-dev 2016-10-27 21:38:40 UTC 
(In reply to Zac Medico from comment #1)
> I suspect the [[ ${signature} != ${file}.gpgsig ]] think may fail in some
> cases.

The gkeys patch for bug 598290 will solve this.
Comment 3 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2020-04-19 12:12:29 UTC 
app-crypt/gkeys is last rited now.
Comment 4 Zac Medico gentoo-dev 2020-04-19 19:02:41 UTC 
By default, we use gemato for key refresh since bug 689506.