On Sat, May 24, 2014 at 09:05:44PM +0200, Benedikt Wildenhain wrote:
On Fri, May 23, 2014 at 06:46:21PM +0200, Michael Schroeder wrote:
On Fri, May 23, 2014 at 06:31:01PM +0200, Benedikt Wildenhain wrote:
I am using the Debian-packages build for ownCloud, which are available at http://download.opensuse.org/repositories/isv:ownCloud:community/Debian_7.0/.
They are only self-signed
A signature can't be self-signed, so are you talking about the "Release.key" pubkey file that is also in the repository? Yes, exactly.
(besides an signature by 6B9D6523, openSUSE Build Service <buildservice@opensuse.org>, which expired in 2008)
We don't put an expiry date in the openSUSE Build Service signature, so are you talking about the openSUSE Build Service pubkey? If yes, where did you get it from? I used hkp://keys.gnupg.net (the same key is also available via http://keys.gnupg.net/pks/lookup?op=get&search=0x3B3011B76B9D6523 )
Ok, I'll talk to our security guys about uploading (and maybe signing) a newer version of the build service pubkey. Thanks, Michael. -- Michael Schroeder mls@suse.de SUSE LINUX Products GmbH, GF Jeff Hawn, HRB 16746 AG Nuernberg main(_){while(_=~getchar())putchar(~_-1/(~(_|32)/13*2-11)*13);} -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org