Re: [Gnu-arch-users] Re: (fairly minor) SECURITY ISSUE

[Johannes Berg]

> 1) alter your check script to output the content and fail if the
> signature isn't valid.

Which check script?

> 2) alter arch to (for signed archives only) get the checksum file
> content from the check script's stdout, instead of from the checksum
> file itself.

done.

address@hidden/tla--gpg-new--1.2--patch-1
@ http://johannes.sipsolutions.de/archives/address@hidden

Please see the log for a description.

johannes
-- 
http://www.sipsolutions.de/
Key-ID: 9AB78CA5 Johannes Martin Berg <address@hidden>

signature.asc
Description: This is a digitally signed message part