| 2017-02-24 15:48:10 |
Scott Moser |
bug |
|
|
added bug |
| 2017-02-24 16:40:59 |
Scott Moser |
description |
Currently, for a ppa, launchpad makes the long key fingerprint available over https.
I'd like to request that it also make the full public key available over https.
Many people use add-apt-repository extensively for using ppas ('add-apt-repository -y smoser/archive')
As I understand it, that basically does:
a. request the 'archive urls', 'description' and long key fingerprint over https from launchpad.net
b. does gpg --recv <long-key-fingerprint> from hkp://keyserver.ubuntu.com:80/ (or the --keyserver argument)
c. adds the result of 'b' to apt using 'apt-key'
Since launchpad is the owner of the signing key for the ppa, why not have it just give us the full public key over the same api that it provides the other bits of information?
My experience is that gpg servers are less reliable than we'd like, and even if they were as reliable as launchpad, any use of a ppa now effectively depends on 2 external systems when 1 could suffice. |
Currently, for a ppa, launchpad makes the long key fingerprint available over https. I'd like to request that it also make the full public key available over https.
Many people use add-apt-repository extensively for using ppas ('add-apt-repository -y smoser/archive')
As I understand it, that basically does:
a. request the 'archive urls', 'description' and long key fingerprint over https from launchpad.net
b. does gpg --recv <long-key-fingerprint> from hkp://keyserver.ubuntu.com:80/ (or the --keyserver argument)
c. adds the result of 'b' to apt using 'apt-key'
Since launchpad is the owner of the signing key for the ppa, why not have it just give us the full public key over the same api that it provides the other bits of information?
My experience is that gpg servers are less reliable than we'd like, and even if they were as reliable as launchpad, any use of a ppa now effectively depends on 2 external systems when 1 could suffice. |
|
| 2017-12-12 21:11:16 |
Dmitrii Shcherbakov |
tags |
|
cpe-onsite |
|
| 2017-12-12 21:11:20 |
Dmitrii Shcherbakov |
bug |
|
|
added subscriber Dmitrii Shcherbakov |
| 2018-07-22 17:56:32 |
Colin Watson |
launchpad: status |
New |
In Progress |
|
| 2018-07-22 17:56:34 |
Colin Watson |
launchpad: importance |
Undecided |
Low |
|
| 2018-07-22 17:56:36 |
Colin Watson |
launchpad: assignee |
|
Colin Watson (cjwatson) |
|
| 2018-07-22 17:57:07 |
Colin Watson |
tags |
cpe-onsite |
api cpe-onsite feature lp-registry |
|
| 2018-07-22 18:09:34 |
Launchpad Janitor |
branch linked |
|
lp:~cjwatson/launchpad/archive-get-signing-key-data |
|
| 2018-07-27 09:30:34 |
Launchpad QA Bot |
tags |
api cpe-onsite feature lp-registry |
api cpe-onsite feature lp-registry qa-needstesting |
|
| 2018-07-27 09:30:35 |
Launchpad QA Bot |
launchpad: status |
In Progress |
Fix Committed |
|
| 2018-07-31 01:43:24 |
Launchpad Janitor |
branch linked |
|
lp:~smoser/software-properties/trunk.lp1667725-https-signing-key |
|
| 2018-08-01 10:45:38 |
William Grant |
tags |
api cpe-onsite feature lp-registry qa-needstesting |
api cpe-onsite feature lp-registry qa-ok |
|
| 2018-08-01 12:38:08 |
William Grant |
launchpad: status |
Fix Committed |
Fix Released |
|
| 2018-08-01 14:54:48 |
Scott Moser |
bug task added |
|
software-properties (Ubuntu) |
|
| 2018-08-01 14:54:58 |
Scott Moser |
software-properties (Ubuntu): status |
New |
In Progress |
|
| 2018-08-03 14:53:11 |
Launchpad Janitor |
branch linked |
|
lp:software-properties |
|
| 2018-08-03 14:56:59 |
Scott Moser |
software-properties (Ubuntu): importance |
Undecided |
Medium |
|
| 2018-08-22 01:44:48 |
Launchpad Janitor |
software-properties (Ubuntu): status |
In Progress |
Fix Released |
|
