X-Original-To: alpine-devel@lists.alpinelinux.org Received: from lavabit.com (unknown [38.107.241.66]) by lists.alpinelinux.org (Postfix) with ESMTP id C68D65C509B for ; Tue, 5 Jun 2018 01:53:32 +0000 (GMT) Received: from doris.lavabit.com (localhost [127.0.0.1]) by doris.lavabit.com (Postfix) with ESMTP id D52B6FAE0263 for ; Mon, 4 Jun 2018 20:53:31 -0500 (CDT) Received: from darla.local (108-82-255-221.lightspeed.rcsntx.sbcglobal.net [108.82.255.221]) by lavabit.com with ESMTP id VRPH1GCHG1E3 for ; Mon, 04 Jun 2018 20:53:31 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lavabit.com; s=bazinga; t=1528163611; bh=Z4VmgGjVSxVMr0+zF2dTv0S8EYNq70XCPDWI8pH5xa0=; h=From:Subject:To:Openpgp:Autocrypt:Message-ID:Date:User-Agent: MIME-Version:Content-Type:Content-Language: Content-Transfer-Encoding; b=Y5L9j6qS+f4jmKZ2joxsGXobKMp3O4+SvB0aeS77Q6Bw8g//1FG37pT19ardwNzk4 U8MCe8HE+lcZDXdc0Kn0aProITvakdosnARhVWRrFhu6Mw5FqS3YTkKcuLKCWgxYMR GSTzlXnklvLeaPMuoQW8B7nZDjqOg6kW7Ks3WfHH3oIQ+v5cq2iQXmxJjhjWjTWDGd /1OLlYDJKjl/+j/OjzRgiB2e6fohNIxLaiSbcKmsV6xSvn6NhXzt0D8KQNR8A7jt/i o3Yrky9EULJ1eY7r4VQ1RKh2dTxPF7k+SX/I5ExL+Rx3qc9kXuEmZ1RyHTPaWEWGmN p1dOmzWtb9zQQ== From: Ladar Levison Subject: [alpine-devel] APK Packages Missing Signatures To: alpine-devel@lists.alpinelinux.org Openpgp: preference=signencrypt Autocrypt: addr=ladar@lavabit.com; prefer-encrypt=mutual; keydata= xsFNBFhpy2IBEADVLiz+xU6mIk6UqLt9cNtOycRihlP47FeytAHlCtZI2l6qE+Z1Pii3hnPd 3sAz7QTXOE1fH3Z40pvv/yI+HiK3Hs94XP2GB98UKZzBo7hZ++aTKjZSy/q3X0OSP+kxYL8Q bKUJndlVYTYl4k+uLBggJZJEE8I5Ol2c4MEJpfktTCNKPgER7gb0Gsx6MMWexrYEF9eZrAjM MSzbUD+myDZEk7TdSuw2raFyczNLu+OYPsCUL2ToNMx1G7ZW9CXyfdq/zpoiZyTrDhFGfHcn fipypWRj0FpHwidbqMbzNZRIHxUn5sL3P4CAADiAiDEBWIk7+YfDFURritdugxudz7zxOFyd YKfJ3tUCAe6VCsu18AZvXfVXBMD2g7bemLFann6SNX7cD+16yv3u2Sj3W7BnBKagQyqyLNei JGqzdcg+xvBMSYSnnkyF7CsC11azP1HCdT5yzA1yjCjOBKKMctBEWQVOm/lVgk25kAgFIBE9 HOZP0zGrJ/JNzql/Oov1cYWyS37J5AQx/eAJNbUIxZfAlbKzKY28lkTmMgQ4CpJAjfb2+QeI y2bK8r7SQqCCwFEg29M3zMaPFBS6dQDZiQ/C/lPSXILCsR1BvpMOxCGICh7C/OaI5PoNnWFo mOXaUiHiVkFrkqi7bC5/+RauUdp7Su/oQE8mK92NblRCaJ7klwARAQABzSFMYWRhciBMZXZp c29uIDxsYWRhckBsYXZhYml0LmNvbT7CwX8EEwECACkFAlhpy2ICGyMFCQeEzgAHCwkIBwMC AQYVCAIJCgsEFgIDAQIeAQIXgAAKCRBqGNBfaWVntfxyD/433j273LYAmDTRS8wWFfC0sqBo ZT0haXK8FUTWVbegmiNRDr0iPKXZ7FMVmx8pD2ehCpCG1043rFhdos+ZkZ57OgPZGte3v/NU X47IJGex+2Q/R0B9OYfPlKgC24r7+WocAuIT9HGOGWPCn4k2aPuG9qFt4f4ulh7Hmk+BJ4x6 VRZhDnTpe6ZtwJx4v04xfwG+nUX8WAPXB5elCewGRPE4OJsJlCfS/UQhRF4TCEGJmAVHnIvD YdTQRMR5XkhbI8/tstCU4Bw5zKpDqaEAcMO5bP1O3LQDzFvI6erAvIbaQ98a06QKsd6HAUWF e24DyXD2NmpfLuoFLhwHCXiMeR1LdnpE7oiPqdzP20DQ8etPTQ91M9hH/dkWO8V8cmG9Lnhy v8RK7JOAT4qK/S/6CLbECrsD7kzCGFif9LUDdVfQQMv4L7lLhV4A9JicSftYh/ayMvXfJWvR Dy6JIcJtq37AukwhTCIUR/z+YUGBGoQX7sFP8IOqyKeiTRAk+pBwvWa0vjoELBJA0YbXLQp5 i5okSaWXfuOkY6vocrbiQ+F9sggeaVrjQe+AdNVtlT7JqZp8myek2ecaKZbQrWuutFYLQrLh LdCbvsV21Z8bhV9h0NmCdJdYVFCD5Dwh8dTwYF43ows3ZC88OGisAKm1YXwVJihCno2s7p5A i8cVyIaCvM7BTQRYactiARAAm+FekTNI9Et+s6c+6Wl1d0GqaIDbp7OO94lqKC5hez5AfERs SuDaXz/fwbTdlQtm+hSCYMQ/0dIWktpvtSMLaUWClD+gEYadX7oLdXehm1kBcamgY6AG55Vk LJUo0cCdyBhxRZsReAmWVQOzQGJIvxjNNSz35a2XZq5I6ztFv23Tb3bQFvV4b1E+KySaLHr4 pJ3Vo76gcvmWU8s2EHPrEgXncx9vSFfRnvh+h2yqRJSpWzLxoIrUBeLSio0DG0P/WRwA604v DRE7nWm3HmyAXB+ULAfE5cvTcDwz0ba8RdeDkq+3gNq2oSgQeEvtZSsopCSVMJpL86SI1cIB Heb83VZZYcQFEpih3QfGmdebc8XQ4+dHGZYQJty/8X4e0xAlEPosoQLaK6FylcDpkBkYxmiW X4iVAP6/PvfOnkW1ZLFvUKawMXPk6L+TJH7mVZj4w8XHAmYgtCGllf/ofZjxacg1FgLvtiX5 EJulB1Jz0Ki/FN3LSbKVaJjccyWsDEN4dam6id4lzQ1mNA5omVn2T17c0B7jMW8MX1kzBOBf WENXj4jkt3nHErywSUnIPgM+krh/5qDSLQz6d8BLRlOyUQqvuhAWpVg344MUmtsorp9mQnst a9+XKED663Ms86/PB0fdPCTFymL4xYBaNQs8zgOd1gECCB99Dr9ILg3NZ5EAEQEAAcLBZQQY AQIADwUCWGnLYgIbDAUJB4TOAAAKCRBqGNBfaWVntRomEACXzxqZ1N+cuPSp64SDx+ywe7kx yz0EJMzwOM56hnMzoKUWnFCivCL+rCQE3BvbEWlq8ogOA1cfjt9FQk2N3OeytSG49/gWh1b6 v4unI2U7f3R21TfPIlVcZkpLlS5/4/aOoD/Wk2tNLjm5RTDmAAYyUT+KMZxI49QqmkRo14sq CBWACP7D+0nGYeg3y72xaa07m4ULfiNtZ7PsJXXkryU5hY3+iM8wuqAdSK7V4GESP0gVfUez 3tPiA9434WayekyZrED163q/Lz/jUyWJX2jYdl1hzLCiHBCUJHC9OXcDJm5naQB89yqNOFad C8dhbHrbskmRAZs5AwCDQcBHwD/NUEzkGT/FOiWMFT/yPKNqntmAvXTnLLeHzhxm56Z5zLCU JpkZYEBfEDxiIGe9gzW4aZ7o1IICYXohNQ1gb18M5aMADcYdZrfGgHAZP1NVXWrDRFsBA0kk KTgstNsJzX01dYR7q7hRM01s1MgdP9914KMb0XK7xgaV7T9EgCkqHRjjO2mLz+X3nXLEH4Ic 7NQoMDUZVQ8nU9PZ9gu/fJunu0BlphASv4ZjeAJZ1N8pfJo8Q6qvXCnqnjLgyOVymD5qpCum YjS4+2LI60WoldMPcYQx6y0qW9kOE3mqQypzXmeNWrhwsJI0mnT6S2BM3d4BDPrfoGRErmT5 IR6XCTyARQ== Message-ID: Date: Mon, 4 Jun 2018 20:53:31 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 X-Mailinglist: alpine-devel Precedence: list List-Id: Alpine Development List-Unsubscribe: List-Post: List-Help: List-Subscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit It seems several packages have made it out to the mirrors without signatures. It doesn't appear to be every package. The following are the ones I know about: ERROR: busybox-1.27.2-r10: UNTRUSTED signature ERROR: ssl_client-1.27.2-r10: UNTRUSTED signature ERROR: busybox-suid-1.27.2-r10: UNTRUSTED signature And if you run: curl --silent https://dl-3.alpinelinux.org/alpine/v3.7/main/x86_64/busybox-1.27.2-r10.apk | gunzip | tar --list Note lack of an SIGN.RSA file. (I'm assuming that is the file which is supposed to hold the signature.) L~ --- Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org Help: alpine-devel+help@lists.alpinelinux.org ---