[tor-bugs] #12871 [RPM packaging]: RPM repo data is not signed and documentation misses repo_gpgcheck

[Tor Bug Tracker & Wiki]

#12871: RPM repo data is not signed and documentation misses repo_gpgcheck
-------------------------------+----------------------
     Reporter:  cypherpunks    |      Owner:  hiviah
         Type:  defect         |     Status:  assigned
     Priority:  normal         |  Milestone:
    Component:  RPM packaging  |    Version:
   Resolution:                 |   Keywords:
Actual Points:                 |  Parent ID:
       Points:                 |
-------------------------------+----------------------

Comment (by hiviah):

 I've been looking into the repo_gpgcheck how it behaves and stumbled upon
 [https://bugzilla.redhat.com/show_bug.cgi?id=1118236 DNF+repo_gpgcheck]
 (DNF is the new Fedora's package manager).

 It seems to me that it'd be best to mention the repo_gpgcheck option on
 the rpms page with its known quirks and let user to decide whether to
 enable it.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12871#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online