John Goerzen wrote: > On Mon, Dec 01, 2003 at 03:30:58PM +0100, Thomas Viehmann wrote: > >>However: As "md5sum my.deb ; ar q my.deb _deb_signature ; ar d my.deb >>_deb_signature ; md5sum my.deb" gives two different lines, I'd think >>signing the individual members of the deb, not the deb in itself is > > > Please check out the debsigs package. I wrote it when I worked at > Progeny back in 2001, and Branden Robinson maintains it these days. It > does exactly that. Of course! Thanks for pointing this out, my apoligies for not noticing. (But he promised a man with three noses!)
Yet, it hasn't made it into the standard developer outfit, which seems to be part of Goswin's point. Cheers T.
pgpkbUPN5sAVs.pgp
Description: PGP signature
