[arch-dev-public] Integrity Check x86_64 06-03-2009

Thomas Bächler thomas at archlinux.org
Mon Mar 9 04:40:25 EDT 2009


Aaron Griffin schrieb:
>> Into extra is fine by me.  Apart from swig + guile, there is the obvious
>> python dep which is not needed in core.
> 
> Yeah this one is goofy. Move it to extra, but is there anyway we can
> remove this makedep from crda?

This is used in the crda PKGBUILD to generate keys-gcrypt.c or 
keys-openssl.c from a public key.

The regulatory database is signed with John Linville's private key, and 
his public key is hardcoded into the crda and regdbdump binaries using 
these source files, to ensure the integrity and authenticity of the 
regulatory database file.

It might be possible to generate these files in advance and download 
them during the build process, but this seems like much work with no 
real benefit. I say we keep the makedepend. Personally, I don't care 
whether a makedepend is in community or not.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
URL: <http://www.archlinux.org/pipermail/arch-dev-public/attachments/20090309/8316e334/attachment-0001.pgp>


More information about the arch-dev-public mailing list