From mboxrd@z Thu Jan 1 00:00:00 1970 From: Nikita Karetnikov Subject: Re: Signed archives Date: Mon, 27 Jan 2014 19:36:59 +0400 Message-ID: <8761p5jv1g.fsf@karetnikov.org> References: <87txcqesqv.fsf@karetnikov.org> <87eh3ure1r.fsf@gnu.org> <87bnyyiv2u.fsf_-_@karetnikov.org> <87ha8qo7rl.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha1; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:57049) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1W7o9Z-0002lq-BS for guix-devel@gnu.org; Mon, 27 Jan 2014 10:31:14 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1W7o9R-0004zQ-P2 for guix-devel@gnu.org; Mon, 27 Jan 2014 10:31:13 -0500 In-Reply-To: <87ha8qo7rl.fsf@gnu.org> ("Ludovic =?utf-8?Q?Court=C3=A8s=22'?= =?utf-8?Q?s?= message of "Sun, 26 Jan 2014 20:36:14 +0100") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Ludovic =?utf-8?Q?Court=C3=A8s?= Cc: guix-devel@gnu.org --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Sorry, I=E2=80=99m failing to understand how the protocol works. Is the sp= ec available somewhere? Could you describe the entire process in a step-by-step way? What does happen when the client requests a substitute? You mentioned that the client attempts to fetch the corresponding .narinfo file. What does happen after that? Why does the client need to cache the answer? Does it check the cache first? =E2=80=98guix authenticate=E2=80=99 accepts a =E2=80=98hash-file=E2=80=99 a= rgument. Does it come from the .narinfo file? If so, should =E2=80=98substitute-binary.scm=E2=80=99 c= heck the signature against the NarHash field? --=-=-= Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBAgAGBQJS5n0fAAoJEM+IQzI9IQ383UAP/Rv1ZjgqC7PSiAaiCJxBPhc8 w899EaLh00xlCvg6sDogD1p52qDQFnwuunkweCg4tlHIyIsX6U/wVgI2200RBLhu IWflProWXLpNPrE5EpcZR/vDZHhnTBbKjg3k3u3Rsc18o3MiRwfODTY++L3DSgeO 85+BJ5WD7bPJZwfHcdYc2DHFiMnujcIMRcE8o3poaUH7DJF7eJE+I7BZ2NdkW205 GyR4c65hqnOse2YxLghoLkmjcJ0yl0Twe4DeUmwc/wRYxOAtdQs/mmJtzgTG7Xcz 4p00UpdJvGBTBUDk3SyAIKukhaasn5GaUP5N8b44DdvKczMMweTxiFe/vYxT8N2D hM0ZxJ8coA4epLCCc5z2Z/jKfPXzKR8BNDSLUID7YhwlnF+6DK3gvDEJE529Y3+q dFD31ndxT0fGL3XLOpWF+3CEUXjCNrZ4HZjASnn4HM3sikiiDYd4iWwmCFNjmxVI FMZYxbh32h4EUr26LyirkoF2MGovZJ5U5lBJE93DqBDlT0O1q3h7/at3J9x2yxZy elWYTEghJOl2t/saYdLryhOLA4Ab+xarFYUYvgPv6Nu/mwOHngIvNvP5F68uTc7r c5LEwodMJi0L5MQ9lMiToka2cuSS7Vds4E5tiDgCKvwaPLPrzKGwYA1G/2Y8rh/P Fi9Vq3fz0nx+V55sw4+6 =5rCP -----END PGP SIGNATURE----- --=-=-=--