Opened 4 years ago
Last modified 4 years ago
#22148 closed task
debian package: apt-key is deprecated; new installation commands need to be documented — at Initial Version
| Reported by: | skyper | Owned by: | team |
|---|---|---|---|
| Priority: | major | Milestone: | |
| Component: | Wiki content | Version: | |
| Keywords: | linux package install apt-key gpg security | Cc: |
Description
The command to download and store the gpg-key for the ubuntu package need to be updated under Download as apt-key add is deprecated as insecure, see https://manpages.debian.org/testing/apt/apt-key.8.en.html.
According to https://wiki.debian.org/DebianRepository/UseThirdParty?action=show&redirect=RepositoryInstructions#OpenPGP_Key_distribution the key should not be ascii-amored and stored in a separate directory beside /etc/apt/trusted.gpg.d/, e.g. /usr/local/share/keyring/, which might not exist so far, see https://wiki.debian.org/DebianRepository/UseThirdParty?action=show&redirect=RepositoryInstructions#Sources.list_entry
As this change only changed the commands but not the underlying security issue, I reverted it.
