Bug#642480: reopened as cryptographic validation used in apt-key net-update is broken

2011-09-24 Thread Julian Andres Klode
On Fri, Sep 23, 2011 at 09:16:03AM +0200, Alexander Neumann wrote: Hi, I've reopened this bug and set the severity to normal in order to keep track on the code this bug pointed at. The cryptographic verification code used in the function called by apt-key net-update is utterly broken.

Bug#642480: reopened as cryptographic validation used in apt-key net-update is broken

2011-09-24 Thread Alexander Neumann
Hi Julian, * Julian Andres Klode j...@debian.org wrote: On Fri, Sep 23, 2011 at 09:16:03AM +0200, Alexander Neumann wrote: I've reopened this bug and set the severity to normal in order to keep track on the code this bug pointed at. The cryptographic verification code used in the

Bug#642480: reopened as cryptographic validation used in apt-key net-update is broken

2011-09-23 Thread Alexander Neumann
Hi, I've reopened this bug and set the severity to normal in order to keep track on the code this bug pointed at. The cryptographic verification code used in the function called by apt-key net-update is utterly broken. The situation is not improved by replacing list-sigs to check-sigs, because