Thread: GPG Question

hi guys, have installed vlc , installed using terminal using http://www.ubuntugeek.com/howto-inst...in-ubuntu.html guide. came across command "sudo apt-key adv --recv-keys --keyserver keyserver.ubuntu.com 7613768d" , has got me thinking. command do? key stored in keyring future use or removed after installing program? happen if 1 day typed "sudo apt-key adv --recv-keys --keyserver keyserver.dodgysite.com 12345678" , stored dodgy site's key got stored? able remove key?

appreciated.

hi , welcome forums!

posted dragon84

what command do?

downloads public key

posted dragon84

does key stored in keyring future use or removed after installing program?

yes, it's stored. public key used authenticate downloaded packages.

posted dragon84

what happen if 1 day typed "sudo apt-key adv --recv-keys --keyserver keyserver.dodgysite.com 12345678" , stored dodgy site's key got stored?

don't it.

don't add new keys , not install packages untrusted sources.

posted dragon84

will able remove key?

yes, can use apt-key command.

list keys:

code:

sudo apt-key list

to remove key:

code:

sudo apt-get del keyid

i.e.

code:

sisco@acme:~$sudo apt-key list  /etc/apt/trusted.gpg  --------------------  pub   1024d/437d05b5 2004-09-12  uid                  ubuntu archive automatic signing key <ftpmaster@ubuntu.com>  sub   2048g/79164387 2004-09-12    pub   1024d/fbb75451 2004-12-30  uid                  ubuntu cd image automatic signing key <cdimage@ubuntu.com>    pub   1024r/12345678 2009-04-04  uid                  dodgysite.com malwares :evil:   sisco@acme:~$sudo apt-key del 12345678  ok

for more info, please read man page:

code:

man apt-key

and community documentation:
community/secureapt

edit: if prefer gui manage keys, go system -> administration -> software sources -> authentication tab

Forum The Ubuntu Forum Community Ubuntu Official Flavours Support General Help [ubuntu] GPG Question

Ubuntu