Skip to contentSkip to conversation

signing ipk packages

DISCUSSION Jaap de Jong 3 participants 4 messages Jan 15, 2013 – Jan 17, 2013

lore
Share & tools
lore
#0 lore raw

Hi All,
is it possible to sign ipk packages?
I've seen that it is possible to add a file called '_signature' to a package. No idea how the process looks.
Anyone an idea or perhaps a pointer where to look?
Cheers!

#1 lore raw
Quoted 6 lines · Jaap de Jong

Hi All,
is it possible to sign ipk packages?
I've seen that it is possible to add a file called '_signature' to a package.
No idea how the process looks.
Anyone an idea or perhaps a pointer where to look?

Look at opkg and its gpg support. We don't enable it by default as nobody was using it and it causes unnecessary dependencies. I think Steve Sakoman may have posted something in the archives about his experiences but I'm not 100% sure.

Cheers,

Richard

#2 lore raw
Quoted 2 lines · Richard Purdie

Steve Sakoman may have posted something in the archives about his experiences but I'm not 100% sure.

Richard - I'm using signed rpm repositories, haven't done anything with ipk!

Steve

#3 lore raw
Quoted 7 lines · Steve Sakoman
Quoted 2 lines · Richard Purdie

Steve Sakoman may have posted something in the archives about his experiences but I'm not 100% sure.

Richard - I'm using signed rpm repositories, haven't done anything with ipk!

Sorry for the noise, my memory clearly wasn't 100% right! ;-)

Jaap: In that case the last people to use opkg package signing were probably openmoko so you could look at those mailing lists posts...

Cheers,

Richard