Comments (3)
I'll think about signature thing later. I prefer to make user trust signature from each fresh install of a package, and store this information. As we can't endorse security of any package provided by other developers, so we don't distribute trusted signatures.
from webos-homebrew-channel.
To repeat a vague idea I proposed on discord:
-
repo manifest contains a copy of the "repo master key"
-
repo manifest also contains a list of developer keys, which are themselves signed by the master key
-
individual packages are signed with their respective developer key
-
when a new repo is added, there's a "do you want to trust this repo..." prompt, which, if accepted, stores a copy of the master key in some local directory of trusted keys
-
we can pre-initialise this directory of trusted master keys, by shipping it with the homebrew channel IPK
So, there's trust-on-first-use, but on a per-repo basis.
Anyone only using the default repo will never have to accept anything, and people adding custom repos will only have to accept once per repo that they add.
As a user, adding a repo means you trust that repo's maintainer(s), who in turn trust the developer(s) of the apps hosted in the repo.
from webos-homebrew-channel.
I have checked through this link: https://stackoverflow.com/questions/34449531/is-there-any-method-to-do-package-signature-for-openwrt-ipk
We can use openssl to sign the IPK file as a whole, and save it as pkgfile.ipk.sig. opkg Will be able to recognize it, if not we can do manually.
from webos-homebrew-channel.
Related Issues (20)
- en error occurred during installation org.webosbrew hp channel.service is not running HOT 2
- LG C2 - Lost root access after Update to homebrew channel v0.6.2 HOT 6
- Certificate Errors
- Homebrew Channel
- An error has occured while downloading some repositories from homebrew HOT 6
- An error has occured during installation HOT 1
- Tv
- Homebrew Channel disappeared HOT 1
- New apps in appstore HOT 1
- Certificate error during download/installation: "certificate has expired" HOT 22
- Certificate error when installing apps: "unable to get local issuer certificate" HOT 63
- Dev.mode turn off on TV HOT 1
- Certificate error while Homebrew app installation (issue came back) HOT 1
- New root vulnerability announced by LG HOT 1
- Regain root after Homebew update HOT 2
- Install timed out / Unknown method "install" for category "/dev" HOT 3
- "CERT_UNTRUSTED" error installing the hyperion project tweaks HOT 1
- Please add cmus - C* Music Player - into webosbrew HOT 1
- "Rebooting" message lasts forever HOT 2
- OLED55C31LA goes to sleep after 4 hours HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from webos-homebrew-channel.