Spec URL: http://jkeating.fedorapeople.org/review/sigul.spec SRPM URL: http://jkeating.fedorapeople.org/review/sigul-0.96-2.src.rpm Description: A signing server, which lets authorized users sign data without having any access to the necessary private key, a client for the server, and a "bridge" that connects the two. Rpmlint only complains about nonstandard uid/gid which is ignorable, and about not being able to read the config file, which is on purpose as it may have account password information.
ill review this
One of the stated design goals of Mitr was: https://fedoraproject.org/wiki/User:Mitr linked off: https://fedorahosted.org/sigul/ No direct access to koji or package repositories and yet there is express an koji Requires. This seems .... not conformant to that goal? -- Russ herrold
It uses the Koji API and public urls to download content and upload signed headers. What it doesn't require, unlike our own signing software, was an nfs mount to the koji package store. The term 'direct' here meant a mount on the system. Koji isn't a hard requirement, sigul can be used to sign things like rpms passed in by the client and return them to the client, bypassing koji all together. Our usage in Fedora though will be with a koji system.
rpmlint gives the following warnings/errors sigul.noarch: W: non-standard-gid /etc/sigul/server.conf sigul sigul.noarch: E: non-readable /etc/sigul/server.conf 0640 sigul.noarch: W: non-standard-uid /var/lib/sigul sigul sigul.noarch: W: non-standard-gid /var/lib/sigul sigul sigul.noarch: E: non-standard-dir-perm /var/lib/sigul 0700 sigul.noarch: W: non-standard-uid /var/lib/sigul/gnupg sigul sigul.noarch: W: non-standard-gid /var/lib/sigul/gnupg sigul sigul.noarch: E: non-standard-dir-perm /var/lib/sigul/gnupg 0700 sigul.noarch: W: non-standard-gid /etc/sigul/bridge.conf sigul sigul.noarch: E: non-readable /etc/sigul/bridge.conf 0640 2 packages and 0 specfiles checked; 4 errors, 6 warnings. I think given the nature of the program that they are all ok builds fine in mock on F-11 as noted in the spec teh tarball is not yet uploaded to fedorahosted. spec is clear legible and in english. Approved
New Package CVS Request ======================= Package Name: sigul Short Description: A signing server and related software client Owners: jkeating mitr Branches: EL-5 F-11 InitialCC:
CVS done.
And built for rawhide. Cheers!