Feature #24105: Debian repository signature-verification - Katello - Foreman

Actions

Copy link

Feature #24105

closed

Debian repository signature-verification

Added by Markus Bucher about 7 years ago. Updated over 6 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Category:

Repositories

Target version:

Katello 3.10.0

Difficulty:

Triaged:

Yes

Bugzilla link:

Pull request:

https://github.com/Katello/katello/pull/7484, https://github.com/Katello/runcible/pull/205

Fixed in Releases:

Found in Releases:

Red Hat JIRA:

Description

Adding fingerprints of gpg-keys used to sign a debian repository to the deb-repository settings.

see PR

Actions

Copy link

Updated by The Foreman Bot about 7 years ago

Status changed from New to Ready For Testing

Actions

Copy link

Updated by Markus Bucher about 7 years ago

Pull request https://github.com/Katello/runcible/pull/205 added

Actions

Copy link

Updated by Markus Bucher about 7 years ago

Debian repositories should be verified for authenticity.
A good way to do that is to add the GPG-key that was used to sign a debian-repo to the content-credentials.
By adding a GPG-key select-field to deb-repository settings, the correct key can be selected.

Actions

Copy link