Shawn Walker wrote:
If that's ok, then sure. Obviously having the signature in the file is preferred from a 'easier-to-verify-and-more-secure' standpoint.

Also ensures that they never get out of sync due to backup/restore issues. Which is why for the crypto framework signing I put the signatures inside the ELF binaries rather than as a separate file.

--
Darren J Moffat
_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss

Reply via email to