package.sig present in [testing]

graysky · 2011-05-20 20:14:27

I noticed some of the packages in [testing] have an accompanying .sig file. What is the purpose of it? Will pacman use them in some fashion? I thought the md5 sums for the packages were stored in the repo.db.tar.gz file on the server.

Last edited by graysky (2011-05-20 20:16:39)

ataraxia · 2011-05-20 21:43:27

Those would be the GPG sigs created by the new package-signing-capable makepkg from pacman's dev version. The sigs users will see do go into the repo.db, but repo-add needs those separate files to import them there.

Arch Linux

#1 2011-05-20 20:14:27

package.sig present in [testing]

#2 2011-05-20 21:43:27

Re: package.sig present in [testing]

Board footer