On Tuesday 14 September 2010 13:01:24 George Kiagiadakis wrote:
> > WARNING: untrusted versions of the following packages will be installed!
> > Untrusted packages could compromise your system's security.
> >
> > Have the packages been properly signed? Is anybody else having this
> > problem?
>
> Try running aptitude/apt-get update again.

It works now!

Thanks for the quick fix!

Torsten


--
To UNSUBSCRIBE, email to debian-kde-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 201009141305.51402.Torsten.Grote@gmx.de">http://lists.debian.org/201009141305.51402.Torsten.Grote@gmx.de

Hello,

On antradienis 14 RugsÄ—jis 2010 13:09:37 Torsten Grote wrote:
> Another note on security:
> pkg-kde-archive-keyring seems to be hosted on the same repository it is
> supposed to verify the trustworthiness of and it is not signed with an
> already trusted key. Installing an untrusted key and trust that for all
> KDE packages is pointless for security.

Well, frankly, pkg-kde-archive-keyring is not a very good example of security,
but imho it is good enough for this purpose. It is there mostly to shut
apt/aptitude up. Have in mind that you already trust the repository enough by
adding it to sources.list.

However, you are still somewhat protected from man-in-the-middle attacks. The
archive key is signed by me and my key is in the debian developers keyring so
you can always validate pkg-kde-archive-keyring package.

$ gpg --no-default-keyring --keyring /usr/share/keyrings/pkg-kde-archive-
keyring.gpg --list-sigs E79C8BAB
pub 4096R/E79C8BAB 2010-03-05
uid Debian pkg-kde repository signing key (http://pkg-
kde.alioth.debian.org/) <debian-qt-kde@lists.debian.org>
sig 3 E79C8BAB 2010-03-05 Debian pkg-kde repository signing key
(http://pkg-kde.alioth.debian.org/) <debian-qt-kde@lists.debian.org>
sig 73EAE214 2010-03-05 [User ID not found]


--
Modestas Vainius <modestas@vainius.eu>

Versions are on Debian "experimental snapshots" as 4.5.1-or1


--
To UNSUBSCRIBE, email to debian-kde-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 201009141841.31485.d_baron@012.net.il">http://lists.debian.org/201009141841.31485.d_baron@012.net.il