LinuxQuestions.org - what GPG-keys do i need to securly update or install Software

- Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)

- - what GPG-keys do i need to securly update or install Software (https://www.linuxquestions.org/questions/linux-security-4/what-gpg-keys-do-i-need-to-securly-update-or-install-software-4175475149/)

what GPG-keys do i need to securly update or install Software

hello!

i always thought debian is secure anyway with updating and installing anithing.
but as i was researching for verfing the checksum-file, i read many threads about people trying to figure out how to use GPG against APT downloaded software and updates and i dont know what else too.

where can i read about this and how should i start this. i want to make it secure and trustworthy as possible.

and one other question: as i was trying to verify the checksum-file with a debian-derivate live cd, i always did get an error about some key not found. i tried "apt-get install debian-key-ring" (i dont remember the exact phrase so dont focus on that)

ok thanks for a link or any help!

Quote:

Originally Posted by John Wayne (Post 5018147)

where can i read about this

You mean this type of documentation?
"7.5 Package signing in Debian": http://www.debian.org/doc/manuals/se...bian-howto/ch7
"Secure Apt": https://wiki.debian.org/SecureApt

Quote:

Originally Posted by John Wayne (Post 5018147)

(..)i always did get an error about some key not found.

Posting exact commands and (error) output helps us help you.