<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
<font face="Helvetica, Arial, sans-serif">I notice that 0.2.1.27 was
downloaded today by the Synaptic Update Manager. Thanks for
creating it. <br>
<br>
I have a question about the procedure for verifying signatures. <br>
<br>
My sources.list file contains: deb
<a class="moz-txt-link-freetext" href="http://deb.torproject.org/torproject.org">http://deb.torproject.org/torproject.org</a> lucid main<br>
<br>
System / Administration / Software Sources / Other Software also
lists <a class="moz-txt-link-freetext" href="http://deb.torproject.org/torproject.org">http://deb.torproject.org/torproject.org</a> lucid main<br>
<br>
In System / Administration / Software Sources / Authentication
there is an deb.torproject.org archive signing key dated
2009-09-04 with the value 886DDD89. <br>
<br>
Am I correct to think that this key sufficient to verify updates
when using sources.list. My impression is that the page
<a class="moz-txt-link-freetext" href="https://www.torproject.org/docs/verifying-signatures.html.en">https://www.torproject.org/docs/verifying-signatures.html.en</a>
refers to verifying files that have been manually downloaded
(rather than through Update Manager). <br>
<br>
Also, who exactly owns </font><font face="Helvetica, Arial,
sans-serif">886DDD89? Is it a specific person or for
torproject.org as a whole?<br>
<br>
Thanks.<br>
</font><br>
On 28/11/10 21:55, <a class="moz-txt-link-abbreviated" href="mailto:andrew@torproject.org">andrew@torproject.org</a> wrote:
<blockquote cite="mid:20101128215535.GA24355@interloper.org"
type="cite">
<pre wrap="">On Sun, Nov 28, 2010 at 08:56:13PM +0000, <a class="moz-txt-link-abbreviated" href="mailto:pumpkin@cotse.net">pumpkin@cotse.net</a> wrote 5.4K bytes in 125 lines about:
: I am curious how to get 0.2.1.27 in the preferred way when using
: Ubuntu. Thanks!
You are doing it correctly. Packages for ubuntu/debian for 0.2.1.27
aren't created yet. We announce the source release before the binary
packages we create are available. It's generally a few days from source
release to binary package availability. The exception here is OS X PPC,
which lacks a build machine right now.
</pre>
</blockquote>
</body>
</html>