PGP / GPG key for new openssh packages -- where can I find it?

Chris Croome yellowdog-general@lists.terrasoftsolutions.com
Wed Jul 3 03:05:00 2002


Hi

Does anyone know where to get the public key for the new ssh packages?  They
are not signed with the key on the yellowdog web site.

Download the public key:

  [chris@cat updates]$ wget http://www.yellowdoglinux.com/resources/public_key.shtml

Import it to your GPG keyring:

  [chris@cat updates]$ gpg --import public_key.shtml

Check the sigs using rpm:

  [chris@cat updates]$ rpm -K openssh-*
  openssh-3.1p1-2.3a.ppc.rpm: md5 (GPG) OK (MISSING KEYS: GPG#AEB6B9C4) 
  openssh-askpass-3.1p1-2.3a.ppc.rpm: md5 (GPG) OK (MISSING KEYS: GPG#AEB6B9C4) 
  openssh-askpass-gnome-3.1p1-2.3a.ppc.rpm: md5 (GPG) OK (MISSING KEYS: GPG#AEB6B9C4) 
  openssh-clients-3.1p1-2.3a.ppc.rpm: md5 (GPG) OK (MISSING KEYS: GPG#AEB6B9C4) 
  openssh-server-3.1p1-2.3a.ppc.rpm: md5 (GPG) OK (MISSING KEYS: GPG#AEB6B9C4) 

Am I doing something stupid here or has a different key been used to sign the
packages?

Chris

-- 
Chris Croome                               <chris@webarchitects.co.uk>
web design                             http://www.webarchitects.co.uk/ 
web content management                               http://mkdoc.com/   
everything else                               http://chris.croome.net/