New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide an alternative signature system #4100

Open

2 tasks done

a-wai opened this issue Jan 29, 2021 · 0 comments · May be fixed by #4170

Contributor

a-wai commented Jan 29, 2021 •

edited

In order to be able to use flatpak on a GPLv3-free system, I'm planning to implement an alternative signature system using ED25519 instead of GPG.

This is based on the OSTree implementation: ostreedev/ostree#1233 and ostreedev/ostree#1878

I'm only starting to look into it, so any feedback/comment/suggestion is welcome while I think about an implementation plan.

This will require 2 major modifications:

allow flatpak to be compiled without GPG support Allow disabling GPG support #4129
implement an optional ED25519-based signature and verification system, using OSTree functions as much as possible Implement alternative signature system #4170

a-wai mentioned this issue

Allow disabling GPG support #4129

Open

a-wai linked a pull request

that will close this issue

Implement alternative signature system #4170

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment