Re: [Rpm-maint] [rpm-software-management/rpm] scripts/pythondistdeps: Fix for Python 3.10 (#1558)
@Conan-Kudo approved this pull request. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/pull/1558#pullrequestreview-611600065___ Rpm-maint mailing list Rpm-maint@lists.rpm.org http://lists.rpm.org/mailman/listinfo/rpm-maint
Re: [Rpm-maint] [rpm-software-management/rpm] rpmsign: support EdDSA signatures (#1571)
@DemiMarie pushed 1 commit. acfa8f488ae13ccf49f1b004fe0e44d420d93c04 rpmsign: support EdDSA signatures -- You are receiving this because you are subscribed to this thread. View it on GitHub: https://github.com/rpm-software-management/rpm/pull/1571/files/e84d135305f8befd2426feaeed21969254c0360f..acfa8f488ae13ccf49f1b004fe0e44d420d93c04 ___ Rpm-maint mailing list Rpm-maint@lists.rpm.org http://lists.rpm.org/mailman/listinfo/rpm-maint
Re: [Rpm-maint] [rpm-software-management/rpm] rpmsign: support EdDSA signatures (#1571)
@DemiMarie pushed 2 commits. aa963fa5121dfe270adad92038b064637a2db0b3 hdrblobInit() needs bounds checks too e84d135305f8befd2426feaeed21969254c0360f rpmsign: support EdDSA signatures -- You are receiving this because you are subscribed to this thread. View it on GitHub: https://github.com/rpm-software-management/rpm/pull/1571/files/4b60d024b3894caf86e085b1fddcc725919a9e97..e84d135305f8befd2426feaeed21969254c0360f ___ Rpm-maint mailing list Rpm-maint@lists.rpm.org http://lists.rpm.org/mailman/listinfo/rpm-maint
Re: [Rpm-maint] [rpm-software-management/rpm] Reject signatures outside of signature header (#1503)
Closed #1503. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/pull/1503#event-4453732610___ Rpm-maint mailing list Rpm-maint@lists.rpm.org http://lists.rpm.org/mailman/listinfo/rpm-maint
Re: [Rpm-maint] [rpm-software-management/rpm] RFE: support base64-encoding for file digests (#1517)
File signatures are even larger and even less efficient, BTW. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/issues/1517#issuecomment-798176015___ Rpm-maint mailing list Rpm-maint@lists.rpm.org http://lists.rpm.org/mailman/listinfo/rpm-maint
Re: [Rpm-maint] [rpm-software-management/rpm] Enforce GPG signatures by default (#1573)
> Rpm actually already verifies signatures _if present_ by default since 4.0 or > thereabouts, but it doesn't _require_ them. Enforcing is supported since >= > 4.14.2 and we also have the bypass-switch (--nosignature) already, so from > strict technical perspective this is just a matter of one line change to turn > the policy switch to 11 (`%_pkgverify_level all`). > > The only thing stopping us is that it breaks the workflow of installing your > own local builds - you need to sign or use --nosignature to install. For > everything else this is 20 years too late already As the average user is not > even affected at all... maybe the folks who build packages can be expected to > deal with a little extra configuration to make the rest of the world that > much safer. Agreed. Those who build packages can generate their own signing keys. Personally, I would consider being able to disable this on a per-package basis a good idea, but it isn’t a blocker. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/issues/1573#issuecomment-798172203___ Rpm-maint mailing list Rpm-maint@lists.rpm.org http://lists.rpm.org/mailman/listinfo/rpm-maint
Re: [Rpm-maint] [rpm-software-management/rpm] scripts/pythondistdeps: Implement provides/requires for extras packages + Rework error messages (#1546)
Note: We should include https://src.fedoraproject.org/rpms/python-rpm-generators/pull-request/35 -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/pull/1546#issuecomment-798053533___ Rpm-maint mailing list Rpm-maint@lists.rpm.org http://lists.rpm.org/mailman/listinfo/rpm-maint