[arch-dev-public] Integrity Check x86_64 06-03-2009
thomas at archlinux.org
Mon Mar 9 04:40:25 EDT 2009
Aaron Griffin schrieb:
>> Into extra is fine by me. Apart from swig + guile, there is the obvious
>> python dep which is not needed in core.
> Yeah this one is goofy. Move it to extra, but is there anyway we can
> remove this makedep from crda?
This is used in the crda PKGBUILD to generate keys-gcrypt.c or
keys-openssl.c from a public key.
The regulatory database is signed with John Linville's private key, and
his public key is hardcoded into the crda and regdbdump binaries using
these source files, to ensure the integrity and authenticity of the
regulatory database file.
It might be possible to generate these files in advance and download
them during the build process, but this seems like much work with no
real benefit. I say we keep the makedepend. Personally, I don't care
whether a makedepend is in community or not.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 260 bytes
Desc: OpenPGP digital signature
More information about the arch-dev-public