[PATCH] submit signed .buildinfo files to buildinfo.debian.net

HW42 hw42 at ipsumj.de
Fri Oct 28 18:40:00 UTC 2016


Chris Lamb:
> HW42 wrote:
[...]
>>> +Subkey-Type: ELG-E
>>> +Subkey-Length: 1024
>>
>> Huh?
> 
> Suggestions welcome. I cribbed it from the internet.
[...]
> Just to re-iterate — and I hope this comes across the right way! — but
> the current state of buildinfo.debian.net is really just a hack, a demo,
> a muse, etc. so haggling over things such as the subkey length of the
> signatures seems a little premature or at least focussing on the wrong
> areas, productivity-wise.

Sorry, I should have wrote a complete question. In this case it's anyway
not security relevant since tests.reproducible-builds.org is only QA and
not intended as a verifier (AFAIU). I was just curious why such a
uncommon setting.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 825 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20161028/464898de/attachment.sig>


More information about the Reproducible-builds mailing list