[tex-live] TeX Live repository currently unsigned

Jonas Witschel jonas.witschel at tu-ilmenau.de
Wed Sep 13 09:44:59 CEST 2017


Hi Norbert,

> The validity of the key was renewed, and since it was the first time
> we did the renewal process we forgot one step (to update the key
> where the nightly rebuild is done).
> 
> The update should *not* have been shipped out, and we will change this
> so that if signing fails no update will be pushed out.
Great, I can confirm that the today's updated database is signed
correctly. Thank you for your quick fix!

> I am discussing with Karl whether we change tlmgr to require the *main*
> repository only to have signatures, but leave subsidiary repos free
> not to be signed.
That sounds like a reasonable approach to me.

Best regards,
Jonas

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://tug.org/pipermail/tex-live/attachments/20170913/ed376948/attachment.sig>


More information about the tex-live mailing list