On Fri, 2007-07-06 at 18:53 -0400, Roberto C. Sánchez wrote:
> On Sat, Jul 07, 2007 at 12:32:17AM +0200, Enrique Perez-Terron wrote:
> >
> > Using synaptic, I click the "Install" checkbox to mark gui-apt-key
> > (which I have not yet installed) for installation. A dialog shows
> > saying
> >
> Try running this at the command line (as root):
>
> apt-get install gui-apt-key
>
> Please report the error message that you see in that case.
This is the output:
# apt-get install gui-apt-key
Reading package lists... Done
Building dependency tree... Done
The following NEW packages will be installed:
gui-apt-key
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 30.5kB of archives.
After unpacking 512kB of additional disk space will be used.
WARNING: The following packages cannot be authenticated!
gui-apt-key
Install these packages without verification [y/N]?y
Get:1 http://ftp.uk.debian.org etch/main gui-apt-key 0.3-1 [30.5kB]
Fetched 30.5kB in 0s (39.2kB/s)
Selecting previously deselected package gui-apt-key.
(Reading database ... 127897 files and directories currently
installed.)
Unpacking gui-apt-key (from .../gui-apt-key_0.3-1_all.deb) ...
Setting up gui-apt-key (0.3-1) ...
#
There does not seem to be any new information.
Actually, I have never before questioned how dpkg/apt does
authentication, so I am not damn sure I am looking the right place. It
seemed to me that apt downloads the *Packages and the *Packages.gpg
files, and uses a previously downloaded public key to verify the
signature. After that, each package is verified just by comparing its
MD5sum with the sum given in the Packages file.
Now I tried to find the package in /var/cache/apt. The file I found
there was dated 2006-11-21, so my first reaction was it was not the
right one, but then I considered that apt may do like "tar x", that it
conserves the modification date of the source file.
# md5sum archives/gui-apt-key_0.3-1_all.deb
f1e77eebbd008a2e9fa3ca3b2de7bba0 archives/gui-apt-key_0.3-1_all.deb
# perl -ne '/Package: ([-._\w]+)/ and $here=($1 =~ /^gui-apt-key/);
$here and /MD5sum: (\w+)/ and print $1,"\n"' /var/lib/apt/lists/
ftp.uk.debian.org_debian_dists_etch_main_binary-amd64_Packages
f1e77eebbd008a2e9fa3ca3b2de7bba0
Exactly the same md5sum.
Regards
Enrique
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
