Re: [Gnu-arch-users] Re: (fairly minor) SECURITY ISSUE

[Johannes Berg]

On Sat, 2004-01-24 at 15:59, Johannes Berg wrote:
> > 2) alter arch to (for signed archives only) get the checksum file
> > content from the check script's stdout, instead of from the checksum
> > file itself.
> 
> done.

Whoops, sorry, forgot this:
Obviously, you need to change your verification command, because
        gpg --verify
doesn't output the stuff that was in there, so you need to do simply
        gpg
instead.

johannes
-- 
http://www.sipsolutions.de/
Key-ID: 9AB78CA5 Johannes Martin Berg <address@hidden>

signature.asc
Description: This is a digitally signed message part