[packman] TLS support on packman.links2linux.org
Stefan Botter
packman at botter.cc
Mon Apr 29 09:24:17 CEST 2024
Hi Indraj,
On Thu, 2024-04-25 at 18:57 +0000, Indraj Gandham wrote:
> I noticed the other day that packman.links2linux.org does not appear to
> support TLS.
>
> This may be a problem because YaST automatically fetches the Packman
> signing key over an insecure connection and then asks the user to
> verify that the key's fingerprint is correct. Since the website is no
> longer delivered over HTTPS, this cannot be done safely.
>
> Apologies in advance if there is anything I have misunderstood.
I have seen this too, and asked Marc to have a look at it.
Thank you for notifying us!
Greetings,
Stefan
More information about the Packman
mailing list