This code is currently in beta, for more information read. This is the example code for apt-check-sigs, the latest version can be retrieved from. $ gpg -export -a 2D230C5F | sudo apt-key add. If you are sufficiently paranoid you will tell apt to trust the key only if you find an acceptable path: Sig! 4F368D5D Debian Archive Automatic Signing KeyĪnd then from your key (or a key you trust) to at least one of the keys used to sign the archive key. Sig!3 2D230C5F Debian Archive Automatic Signing Key Uid Debian Archive Automatic Signing Key (2006) Gpg: key 2D230C5F: public key "Debian Archive Automatic Signing Key (2006)
Retrieving the fingerprint can be done for multiple sources, you can check, talk to Debian Developers on IRC, read the mailing list where the key change will be announced or any other additional means to verify the fingerprint.
You can verify the fingerprint as well as the signatures on the key.
0 kommentar(er)
