[packman] TLS support on packman.links2linux.org

Stefan Botter packman at botter.cc
Mon Apr 29 09:24:17 CEST 2024


Hi Indraj,

On Thu, 2024-04-25 at 18:57 +0000, Indraj Gandham wrote:
> I noticed the other day that packman.links2linux.org does not appear to
> support TLS.
> 
> This may be a problem because YaST automatically fetches the Packman
> signing key over an insecure connection and then asks the user to
> verify that the key's fingerprint is correct. Since the website is no
> longer delivered over HTTPS, this cannot be done safely.
> 
> Apologies in advance if there is anything I have misunderstood.

I have seen this too, and asked Marc to have a look at it. 
Thank you for notifying us!

Greetings,

Stefan



More information about the Packman mailing list