opkg gpgme

[Thomas Wood]

On 25 Nov 2008, at 15:15, George Xenoulis wrote:

> Hello all,
>
> I'm using opkg with gpg enabled.
> As far as I understand, in an opkg update,
> the Packages file from the repository
> is stored in /usr/lib/opkg/lists/<dist-name>.
> If a Packages.sig is found in the repository, the Packages file is
> also verified against it.
>
> But, in opkg install <package name>. opkg tries to verify
> /usr/lib/opkg/lists/<dist-name> against
> /usr/lib/opkg/lists/<dist-name>.sig
>
> Should /usr/lib/opkg/lists/<dist-name>.sig and Packages.sig (of the
> repository)
> be the same files?


If I recall correctly, they should be the same file. Obviously 
Packages.sig is renamed to avoid collisions if you have more than one 
repository enabled.

Regards,

Thomas

-- 
Thomas Wood
Open Source Technology Centre
Intel Corporation