From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: Re: Support for signed substitutes pushed Date: Thu, 03 Apr 2014 21:48:55 +0200 Message-ID: <8738hup520.fsf@gnu.org> References: <878urwzhpt.fsf@gnu.org> <87ha6fic8t.fsf@gnu.org> <20140403172101.GA10728@debian> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:43279) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WVndG-0002Tk-Pp for guix-devel@gnu.org; Thu, 03 Apr 2014 15:49:07 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1WVndC-0001SC-2a for guix-devel@gnu.org; Thu, 03 Apr 2014 15:49:02 -0400 Received: from hera.aquilenet.fr ([2a01:474::1]:58336) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WVndB-0001S6-Rb for guix-devel@gnu.org; Thu, 03 Apr 2014 15:48:57 -0400 In-Reply-To: <20140403172101.GA10728@debian> (Andreas Enge's message of "Thu, 3 Apr 2014 19:21:01 +0200") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Andreas Enge Cc: guix-devel@gnu.org Andreas Enge skribis: > Excellent work, thank you! You=E2=80=99re welcome. :-) Does it work for you? > On Sun, Mar 30, 2014 at 11:54:10PM +0200, Ludovic Court=C3=A8s wrote: >> Please run =E2=80=98make check=E2=80=99, try it, and report any problems= . Note that >> commit bf59c06 adds the public key used to sign substitutes from >> hydra.gnu.org. This commit is GPG-signed by me, like this message. >> It=E2=80=99s a 4096-bit RSA key (RSA, not Curve25519, so that users of >> libgcrypt < 1.6 can use it too): > > Are we limited to exactly one signature, or could hydra.gnu.org sign with > two keys, a legacy and a modern one? It can only sign with one key. Eventually we can start requiring libgcrypt 1.6, but I felt it=E2=80=99s too early for that. Ludo=E2=80=99.