search

kiss-community / repo

KISS Linux - Unofficial Repositories, mirror of https://codeberg.org/kiss-community/repo
https://kisslinux.org
MIT License
41 stars 17 forks source link

drop gnupg1 #105

Closed illiliti closed 2 years ago

illiliti commented 2 years ago

It is solely present here for commit signing/verification. Instead, let's use ssh-based signing because it is safer and less error-prone.

ioraff commented 2 years ago

it is safer and less error-prone

how so?

illiliti commented 2 years ago

gnupg1 has been deprecated in favor of more bloated gnupg2. it is no longer maintained, that's why openssh method is more safer. gnupg1 is known to be unreliable due to constant errors for unknown cause: https://github.com/kisslinux/repo/issues/141 https://github.com/kisslinux/repo/issues/351

These issues still show up by this day.