Mail archive

[alpine-devel] APK Packages Missing Signatures

From: Ladar Levison <>
Date: Mon, 4 Jun 2018 20:53:31 -0500

It seems several packages have made it out to the mirrors without
signatures. It doesn't appear to be every package. The following are the
ones I know about:

ERROR: busybox-1.27.2-r10: UNTRUSTED signature
ERROR: ssl_client-1.27.2-r10: UNTRUSTED signature
ERROR: busybox-suid-1.27.2-r10: UNTRUSTED signature

And if you run:

curl --silent
| gunzip | tar --list

Note lack of an SIGN.RSA file. (I'm assuming that is the file which is
supposed to hold the signature.)


Received on Mon Jun 04 2018 - 20:53:31 UTC