We have moved to a new Sailfish OS Forum. Please start new discussions there.

Are the Jolla Store rpms signed?

asked 2013-12-27 15:42:38 +0300

AL13N gravatar image

updated 2014-01-31 00:34:09 +0300

ssahla gravatar image

Are the Jolla Store rpms signed by jolla? so that you can be sure that the download completed correctly and the signature matches from Jolla?

edit retag flag offensive close delete

2 Answers

Sort by » oldest newest most voted

answered 2013-12-27 16:28:29 +0300

penpen gravatar image

updated 2013-12-27 16:31:24 +0300

Some of the packages are signed. For example jolla-alarm-ui has a signature:

$ rpm -qi jolla-alarm-ui
Name : jolla-alarm-ui
Signature : DSA/SHA1, Wed 27 Nov 2013 13:46:05 EET, Key ID 68ebdd7df2633ee0

But for example "less" isn't signed: Signature : (none), but I think I installed that from mer-tools repository that needs to be activated separately.

edit flag offensive delete publish link more

answered 2013-12-30 14:20:59 +0300

Jolla RPM seems to be signed by Jolla, however, other Harbour applications, like puzzlemaster, are not signed.

[nemo@localhost ~]$ rpm -qi harbour-puzzle-master
Name        : harbour-puzzle-master
License     : GPLv2+
Signature   : (none)
edit flag offensive delete publish link more


so, the signing is left to the app provider... not sure if that's a good idea...

I would prefer harbour apps to be signed by some harbour key

AL13N ( 2013-12-30 18:04:54 +0300 )edit

I agree. Better open a new post to ask for them to be signed ?

Sfiet_Konstantin ( 2013-12-30 18:09:49 +0300 )edit

@Sfiet_Konstantin i did so here

AL13N ( 2013-12-30 18:28:08 +0300 )edit
Login/Signup to Answer

Question tools



Asked: 2013-12-27 15:42:38 +0300

Seen: 329 times

Last updated: Dec 30 '13