[Bug debuginfod/28204] extend webapi / verification with forthcoming signed-contents archives

[rgoldber at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=28204

Ryan Goldberg <rgoldber at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |rgoldber at redhat dot com

--- Comment #5 from Ryan Goldberg <rgoldber at redhat dot com> ---
Created attachment 14208
  --> https://sourceware.org/bugzilla/attachment.cgi?id=14208&action=edit
Submit A Patch for 28204

At the moment there are no public x509 verification certificates available to
validate the signatures generated for RHEL 9. There is discussion at
https://issues.redhat.com/browse/SIGNSERVER-245 for the future location and in
fedora 37 the cert will be available on the fedora security site,
https://getfedora.org/security/

-- 
You are receiving this mail because:
You are on the CC list for the bug.