opkg gpgme

Thomas Wood thomas at openedhand.com
Wed Nov 26 00:25:20 CET 2008

On 25 Nov 2008, at 15:15, George Xenoulis wrote:

> Hello all,
> I'm using opkg with gpg enabled.
> As far as I understand, in an opkg update,
> the Packages file from the repository
> is stored in /usr/lib/opkg/lists/<dist-name>.
> If a Packages.sig is found in the repository, the Packages file is
> also verified against it.
> But, in opkg install <package name>. opkg tries to verify
> /usr/lib/opkg/lists/<dist-name> against
> /usr/lib/opkg/lists/<dist-name>.sig
> Should /usr/lib/opkg/lists/<dist-name>.sig and Packages.sig (of the
> repository)
> be the same files?

If I recall correctly, they should be the same file. Obviously 
Packages.sig is renamed to avoid collisions if you have more than one 
repository enabled.



Thomas Wood
Open Source Technology Centre
Intel Corporation

More information about the opkg-devel mailing list