Up2date

[Gregory Woodbury]

On Thu, Sep 30, 2004 at 04:18:57PM -0700, TongKe Xue wrote:
> Hi all,
> 
>   I hav a few questions concerning up2date.
> 
> 1) What is RedHat's GPG key? Up2date said it was going to "install the
> key" but didn't say what the key was.

The RPM-GPG-KEY is included in the top (root) of the CD images and is
also available under the /usr/share/rhn directory
 
> 2) How can I ensure that the packages I download are from
> RedHat/Fedora and not spoofed/trojaned? (By the man in middle attack)

That is supposedly what the GPG keys do.  For rawhide, however, they
don't usually sign all the packages.  To some extent you have to trust
the connections to wherever.  If you have a real reason for paranoia you
might want to consider buying a distribution rather than downloading it.

-- 
G.Wolfe Woodbury     `- -'
RHCT                   U
The Line Eater is a boojum!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20040930/a5f510fe/attachment-0001.sig>