Thread: [Aide-devel] Re: AIDE pgp signature
Brought to you by:
hvhaugwitz,
rvdb
From: Mike M. <mi...@ma...> - 2003-11-28 21:12:34
|
On Fri, Nov 28, 2003 at 03:06:00PM -0600, John Kristoff <jt...@no...> wrote: > I just wanted to strongly encourage > you to provide a PGP signature to the AIDE distribution. If you need > any assistance in doing this I can help. Perhaps it would be prudent to create a key for this purpose and then sign it with our keys (mine should, as a result of my Debian involvement, have a decent position in the global web of trust). If you agree, Richard, I'll create a private key with this list as its email address. -- Mike Markley <mi...@ma...> GPG: 0x3B047084 7FC7 0DC0 EF31 DF83 7313 FE2B 77A8 F36A 3B04 7084 |
From: Richard v. d. B. <ri...@vd...> - 2003-11-29 13:12:52
|
Mike Markley wrote: > Perhaps it would be prudent to create a key for this purpose and then > sign it with our keys (mine should, as a result of my Debian > involvement, have a decent position in the global web of trust). > > If you agree, Richard, I'll create a private key with this list as its > email address. Sounds great. The more security, the better. :-) Go ahead and set it up. I can do this as well, but probably not until monday. Richard |
From: Mike M. <mi...@ma...> - 2003-11-29 23:16:24
|
I've generated the key and given it an expiration date of Jan 1 2005; we can create a new key for each year (or revisit the issue then :). When it's renewal time we can either re-sign the stuff or just let it be -- the signatures will still validate, but the user will see a warning. It just didn't seem prudent to have a private key that's valid forever be, potentially, in the hands of multiple people :). I encourage anyone interested to sign it and upload to the keyservers. I'll put the ascii-armored version up on the website somewhere, then inspect and sign the 0.10 release tarball. pub 1024D/DC271F5C 2003-11-29 Aide Developers <aid...@li...> Key fingerprint = 7F95 C4F0 77CE 4459 5DDC 37D1 1334 96A2 DC27 1F5C sub 1536g/50B50240 2003-11-29 [expires: 2005-01-01] -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.2.3 (GNU/Linux) mQGiBD/JJhkRBACfOnyERP4XtC8akVIooLuf82FMDdH2DaLkzzqd9nxt8pfnDDib cyWxSUe5+PDxk+85vCzPfo10U/cft2NxDfXxvHBZuM8zaV+tLDdODjihE92fksmw f1s7M8X0l7ndPO37u154olcU7pXxF53gB88oaJEqB+eX6t8oGqea8wzyqwCgsmF4 WvF8m9IxLlIji6XM+DTjdAkEAJQcexjh8oOggqG3TMPMpoufh9qNQjUexXXI12o/ L2Zx5hc6l76nYB5qt8blJuQtAFDp49lcVpA920A2RUciLYZJeORyyEbgF7Xx8LFB VE6AUbqmDtjKm20Hp6dgHvkT0/uq33W/X6rPASjXa1gQlHNIdvAhjPW73POGJkkA IJlFBACMmknJcXNqWbVpQjjWXZ+Nf+bTyA1qieQVY07eXdPQCW3wnMRID2LCMdAK QYhDbZ+mUMWw/8JPZ/uKEjJZY/5dB/WyYi7zA32S2CNtnai27SCZuqWvWeAxt2yx Ib+mXUeR/zcBIBA9nFUBerAG2g7P7tWWyE4oemLLP8n6f2tHhLQyQWlkZSBEZXZl bG9wZXJzIDxhaWRlLWRldmVsQGxpc3RzLnNvdXJjZWZvcmdlLm5ldD6IZAQTEQIA JAUCP8kmGQIbAwUJAg4GgAYLCQgHAwIDFQIDAxYCAQIeAQIXgAAKCRATNJai3Ccf XLB5AJ9Zh5UFPb972cwjlb28JQV6lmVSEgCeIP8onDYUds3Z7haSECqwYPip4BS5 AY0EP8kmHBAGAK3Ck66xNgfgHl8rvSBO4BxakgIlx0srznO1miYVMACoEf6RxLXp HiDNSnUmNm9arrxjE0SGt4hW9oLr+jZ1UDYu45moLzVsehtpOpqJehcBS4VVBwfW nzcPCZDDPfxRbTad4uE/2k6MkbDYHU4Ne7L4T4K2njeGVGA4LHWOlyjexMw2OLt6 dDh9fiuZNlLu0eBzLT7GYBKlb2S9uNmFQvgI+9vbd9oXbMGlkBQ10YlKlzKC5pWi j2kr8KKTOO94iwADBgX/VOYjerz+YcyfwzBLO3PMdlyXSUYHHrshf9KWf1wj6Ohx cHs21ldwF4nb47mAsoTpEtaf2CDeIxD3O3Y7oL6/rk9KOGeQ10Fo51To+AIT81ck mHvl11/h6to8u/IvQ1cXahnTnkRKJrzHEAcbe2+/y/OPhNkc/VIIDp1wUUrgkfSB Icznr2i8eHLK0yVW30nJESyT1RK/0lQcRdQrnGAiUQo8sctUfvd1CvtM8k0dj7Ef i20b6jCR8TeHBdoxsHApiE8EGBECAA8FAj/JJhwCGwwFCQIOBoAACgkQEzSWotwn H1zPPwCfafH1ZilHFqyjWJXqFjxOFc7QxrIAnjs7NaMbSBATzqgGlpeL75FnEGTi =vlvZ -----END PGP PUBLIC KEY BLOCK----- -- Mike Markley <mi...@ma...> GPG: 0x3B047084 7FC7 0DC0 EF31 DF83 7313 FE2B 77A8 F36A 3B04 7084 |
From: Gregor I. <gre...@in...> - 2003-12-06 07:19:06
|
when i compile the package, the default config file (aide.conf) is not generated from the script. The contents is the same like aide.conf.in And it would be nice to have also MD5 hash to check the file integrity on download. regards, gregor |
From: Mike M. <mi...@ma...> - 2003-12-06 10:40:13
|
On Sat, Dec 06, 2003 at 08:18:58AM +0100, Gregor Ibic <gre...@in...> wrote: > when i compile the package, the default config file (aide.conf) is not > generated from > the script. The contents is the same like aide.conf.in I'll check this when I commit the completely revamped autoconf stuff, as it should be generated from there. > And it would be nice to have also MD5 hash to check the file integrity on > download. It's probably easy enough to put this on the page somewhere, but you're better off using the PGP signature (the public key for which you can get off the download page or from any keyserver). -- Mike Markley <mi...@ma...> GPG: 0x3B047084 7FC7 0DC0 EF31 DF83 7313 FE2B 77A8 F36A 3B04 7084 |