Re: Cryptographic signatures of installer sets

On Tue, Feb 11, 2020 at 11:31:32PM +0000, Nathan Dorfman wrote:
> > The patch I have at the moment looks for the MANIFEST (rather, the
> > <arch>-<target_arch>-<X.Y-RELEASE>) file in the location they are
> > installed by the misc/freebsd-release-manifests package.
> 
> This seems reasonable, but I think the checksum script is also used by
> the system installer (not just the jail setup script).
> 

No, they are two different sets of functionality.  The system installer
*always* uses the MANIFEST from the installation medium, but when fixing
that, I did not notice the jail subcommand, nor that it fetches a remote
MANIFEST file.

> Have you considered the possibility of simply publishing a detached
> signature with every MANIFEST, in a similar manner to what is done for
> the installer images?
> 

I have not, as a change to the misc/freebsd-release-manifests port will
generate an email (or at minimum, a change in the repository), which
would be a red flag for nefarious behavior.

Glen

-----BEGIN PGP SIGNATURE-----
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=8nBS
-----END PGP SIGNATURE-----