Bug#389646: apt should try to import a key if a package was signed by a unknown key

Rober Morales <[EMAIL PROTECTED]> writes: >> > It'll reduce the security of machine since won't make difference if >> > the key is or not know before you upgrade or install a package. >> >> Agreed; an idea might be to import the key to some "untrusted" keyring, >> and allow the user to add it to t

Bug#389646: apt should try to import a key if a package was signed by a unknown key

> > It'll reduce the security of machine since won't make difference if > > the key is or not know before you upgrade or install a package. > > Agreed; an idea might be to import the key to some "untrusted" keyring, > and allow the user to add it to the "trusted" list after giving some > stern lect

Bug#389646: apt should try to import a key if a package was signed by a unknown key

Otavio, > It'll reduce the security of machine since won't make difference if > the key is or not know before you upgrade or install a package. Agreed; an idea might be to import the key to some "untrusted" keyring, and allow the user to add it to the "trusted" list after giving some stern lectur

Bug#389646: apt should try to import a key if a package was signed by a unknown key

tag 389646 + wontfix thanks Rober Morales-Chaparro <[EMAIL PROTECTED]> writes: > Package: apt > Version: 0.6.45 > Severity: minor > > Instead of showing a warning message when apt does not know the key, apt > cat try to execute (with or without the user confirmation?): > > #!/bin/bash > KEY=$

Bug#389646: apt should try to import a key if a package was signed by a unknown key

Package: apt Version: 0.6.45 Severity: minor Instead of showing a warning message when apt does not know the key, apt cat try to execute (with or without the user confirmation?): #!/bin/bash KEY=$1 gpg --keyserver subkeys.pgp.net --recv $KEY gpg --export --armor $KEY | apt-key add - TI