Re: java: building from source vs signed .jar's

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Feb 18, 2008 at 12:28:47PM -0500, Jesse Keating wrote:
> Also I think the problem here is that there is a cert system that is
> being held hostage by Sun, and nobody else gets to play.  This is worse
> than the current web cert games we play with browsers.

Can't we add a Fedora certificate to the distribution with a private
key only the builders have access to? And maybe only for a whitelist
of packages that the FPC would approve?

As a short term solution for the geogebra case we could ship it
unsigned until we have a procedure in place (of course all self-built
from source).
-- 
Axel.Thimm at ATrpms.net

Attachment: pgpAE2YSIA5Qb.pgp
Description: PGP signature

--
Fedora-packaging mailing list
Fedora-packaging@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-packaging

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite Forum]     [KDE Users]

  Powered by Linux