[Bug 1455605] Re: ubuntu-device-flash should verify signature in cache matches current keyring before flashing

2015-05-26 Thread Steve Langasek
** Changed in: goget-ubuntu-touch (Ubuntu) Importance: Undecided = Critical -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1455605 Title: ubuntu-device-flash should verify signature in cache

[Bug 1455605] Re: ubuntu-device-flash should verify signature in cache matches current keyring before flashing

2015-05-20 Thread Steve Langasek
** Summary changed: - ubuntu-device-flash should run a checksum before it starts flashing + ubuntu-device-flash should verify signature in cache matches current keyring before flashing -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1455605] Re: ubuntu-device-flash should verify signature in cache matches current keyring before flashing

2015-05-20 Thread Steve Langasek
We've managed to track this down on IRC to the fact that both the public system-image.ubuntu.com and the PES-internal system-image instance are publishing the same Ubuntu tarballs, but signed by different keys (which is by design). The result is that if you use the same system to flash images

[Bug 1455605] Re: ubuntu-device-flash should verify signature in cache matches current keyring before flashing

2015-05-20 Thread Steve Langasek
We've managed to track this down on IRC to the fact that both the public system-image.ubuntu.com and the PES-internal system-image instance are publishing the same Ubuntu tarballs, but signed by different keys (which is by design). The result is that if you use the same system to flash images