Skip to content.
The Debian System -- Concepts and Techniques The Debian System -- Concepts and Techniques
Martin F. Krafft Open Source Press / No Starch Press ISBN 3-937514-07-4 / 1-593270-69-0
Sections
Personal tools

New ftpmaster key for 2006 (page 574)

Document Actions
More...

Reported on: 2006-01-04

In chapter C. Miscellaneous on page 574:

On 3 January 2006, a new archive signing key for the main Debian archive was put in place. The following are the relevant data to help you verify it.

        URL: http://ftp-master.debian.org/ziyi_key_2006.asc
ID: 2d230c5f
Date: 2003-01-03
Fingerprint: 0847 50fc 01a6 d388 a643 d869 0109 0831 2d23 0c5f
Creator: Anthony Towns (key 0x2a4e3eaa)

As in the book, this information comes without any warranty.

Discussion

Quoting a member of the release team (original post):

The Release.gpg file contains two signatures now, both one with the 2005 key and the 2006 key, to have a short transition period. The archive still validates with the 2005 key, which isn't expired yet, and I think APT should not spread too worrysome errors at users while the archive can still be verified. Only when the 2005 expires and the user still hasn't imported the 2006 key (some mechanism needs to be implemented for that for it to happen cleanly and in a user-frienly way) apt should really bail out on the user.

Credits

Anthony Towns, Jeroen van Wolffelaar
Feedback

Richard Bejtlich, Tao Security: Krafft is obviously a Debian enthusiast, but he is not a zealot blind to any flaws Debian might possess. He is also not afraid to praise other OS' (like NetBSD) or declare that certain misconceptions (think debconf) are invalid. When necessary he compares Debian tools or syntax to other Linux distributions, such as a chart on pp 200-201 on apt, yum, up2date, and urpmi. The book also contains a large number of footnotes with URLs for more research and additional commentary.

 
 

Powered by Plone

This site conforms to the following standards: