[csw-devel] SF.net SVN: gar:[18684] csw/mgar/pkg/opencsw-manual/trunk/files/ for-administrators/getting-started.rst
bdwalton at users.sourceforge.net
bdwalton at users.sourceforge.net
Mon Jul 9 21:25:40 CEST 2012
Revision: 18684
http://gar.svn.sourceforge.net/gar/?rev=18684&view=rev
Author: bdwalton
Date: 2012-07-09 19:25:39 +0000 (Mon, 09 Jul 2012)
Log Message:
-----------
opencsw-manual/trunk: update pki handling instructions
Modified Paths:
--------------
csw/mgar/pkg/opencsw-manual/trunk/files/for-administrators/getting-started.rst
Modified: csw/mgar/pkg/opencsw-manual/trunk/files/for-administrators/getting-started.rst
===================================================================
--- csw/mgar/pkg/opencsw-manual/trunk/files/for-administrators/getting-started.rst 2012-07-09 14:57:15 UTC (rev 18683)
+++ csw/mgar/pkg/opencsw-manual/trunk/files/for-administrators/getting-started.rst 2012-07-09 19:25:39 UTC (rev 18684)
@@ -86,25 +86,25 @@
The catalog is signed with PGP and it is a good idea to set up your system to
verify the integrity of the catalog. As the catalog itself contains hashes for
all packages in the catalog this ensures you actually install the packages
-which were officially released. First you need to install ``gnupg`` (of course
+which were officially released. First you need to install ``cswpki`` (of course
with pkgutil!)::
- pkgutil -y -i gnupg
+ pkgutil -y -i cswpki
Then you need to import the public key::
- root# wget -O - http://www.opencsw.org/security/ | gpg --import -
+ root# /opt/csw/bin/cswpki --import
The current fingerprint looks like this::
- root# gpg --fingerprint board at opencsw.org
- pub 1024D/9306CC77 2011-08-31
- Key fingerprint = 4DCE 3C80 AAB2 CAB1 E60C 9A3C 05F4 2D66 9306 CC77
- uid OpenCSW catalog signing <board at opencsw.org>
- sub 2048g/971EDE93 2011-08-31
+# gpg --homedir=/var/opt/csw/pki/ --fingerprint board at opencsw.org
+pub 1024D/9306CC77 2011-08-31
+ Key fingerprint = 4DCE 3C80 AAB2 CAB1 E60C 9A3C 05F4 2D66 9306 CC77
+uid OpenCSW catalog signing <board at opencsw.org>
+sub 2048g/971EDE93 2011-08-31
You may also trust the key once you verified the fingerprint::
- root# /opt/csw/bin/gpg --edit-key board at opencsw.org trust
+ root# /opt/csw/bin/gpg --homedir=/var/opt/csw/pki --edit-key board at opencsw.org trust
Now everything is in place for enabling security in ``pkgutil``. Edit the ``/etc/opt/csw/pkgutil.conf``
and uncomment the two lines with ``use_gpg`` and ``use_md5`` so they look like this::
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
More information about the devel
mailing list