Re: Up2date
On Thu, Sep 30, 2004 at 04:18:57PM -0700, TongKe Xue wrote:
Hi all,
I hav a few questions concerning up2date.
1) What is RedHat's GPG key? Up2date said it was going to "install the
key" but didn't say what the key was.
The RPM-GPG-KEY is included in the top (root) of the CD images and is
also available under the /usr/share/rhn directory
2) How can I ensure that the packages I download are from
RedHat/Fedora and not spoofed/trojaned? (By the man in middle attack)
That is supposedly what the GPG keys do. For rawhide, however, they
don't usually sign all the packages. To some extent you have to trust
the connections to wherever. If you have a real reason for paranoia you
might want to consider buying a distribution rather than downloading it.
--
G.Wolfe Woodbury `- -'
RHCT U
The Line Eater is a boojum!
Attachments:
- attachment.sig (application/pgp-signature — 189 bytes)