[packman] TLS support on packman.links2linux.org

Indraj Gandham indraj at posteo.net
Thu Apr 25 20:57:19 CEST 2024


Hi all

I noticed the other day that packman.links2linux.org does not appear to
support TLS.

This may be a problem because YaST automatically fetches the Packman
signing key over an insecure connection and then asks the user to
verify that the key's fingerprint is correct. Since the website is no
longer delivered over HTTPS, this cannot be done safely.

Apologies in advance if there is anything I have misunderstood.

Kind regards
Indraj



More information about the Packman mailing list