Re: [Gnu-arch-users] crypto signing take 2

[Robert Collins]

On Tue, 2003-12-09 at 08:59, Tom Lord wrote:

> Really I have no objection to working it back in later.  It just isn't
> needed to have useful functionality and I'm not clear about why it
> would be important.   What "cute things" do you have in mind?

The ones I described mainly: dynamically resigning an archive as you
mirror it - perhaps to sign unsigned archives, or to note that a given
maintainer is listed as having checked all the code. 

> One problem with it is that it violates a current abstraction barrier:
> ...

> If we decide to add special push-mirror handling of signatures --
> we'll have to think carefully about how to do it cleanly.

Ok.

>     > (Oh, archive-fs.c is -just about- dead here
>     > (address@hidden/tla--gpg--1.1)
> 
> Wow, that's good news!

patch-2 is committed, mirrored and passes make test. Thats not to say
that it's gold... but if you'd like to mirror and play....

Rob

-- 
GPG key available at: <http://www.robertcollins.net/keys.txt>.

signature.asc
Description: This is a digitally signed message part