Re: (newbie tries Fedora 18 Beta) CHECKSUMs
| From: Andre Robatino <robatino(a)fedoraproject.org>
| > ===> Which is the real Fedora 18 key? Why isn't this documented better?
|
| I vaguely remember having this issue early in F18 development. I believe the
| verify page initially had the 22B3B81A key but for some reason it had to be
| changed. The DE7F38BD key is the current one. There's a bug
| https://bugzilla.redhat.com/show_bug.cgi?id=861836 which has never been acted on.
Thanks for that reference. It seems to have been acted on today.
Coincidence?
| > ===> Should we not have a version of sha256 that knows how to deal
| > with the gpg signature?
|
| The FAILED messages for missing files have always been there.
I understand it and I think that it is more-or-less reasonable.
| The warning about
| improperly formatted lines is recent. I filed
| https://bugzilla.redhat.com/show_bug.cgi?id=733561 against this bug it was
| closed as NOTABUG due to concerns that blocking that warning could cause
| security issues.
Thanks for that reference too.
I've added to that closed bug report. I've added a new script to run
gpg and sha256sum in such a way that the user only needs to type one
command and the spurious diagnostics are not emitted.
I hope something is done because this is perhaps a user's first
experience with Fedora. Why make it needlessly complex, confusing,
and unpleasant? Heck, even exprienced users don't need the problems.