From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <sourceware-bugzilla@sourceware.org>
Received: by sourceware.org (Postfix, from userid 48)
	id AB2543858401; Fri, 25 Aug 2023 15:24:46 +0000 (GMT)
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org AB2543858401
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sourceware.org;
	s=default; t=1692977086;
	bh=dE9XLyg3RqTUHz2xF8DCGebVVNaYgur72Wf6M9TFmxA=;
	h=From:To:Subject:Date:In-Reply-To:References:From;
	b=BlyRH1KkaIQqnMGFVlvmTjEYgtcRlUZMbN74pvb/3NmZD0Oh0KG0/+r9YdTpCKjwR
	 /wJmhZl7ASpwdAhCc1HhGU1TIs7r1N/OLp1CH19yqKyKbvDRHJQhRnGxWRnzmNMDjE
	 a3wfU9uRPYGvmhlSaMyal97RwwXj4WMZ3pJnEWgc=
From: "mark at klomp dot org" <sourceware-bugzilla@sourceware.org>
To: elfutils-devel@sourceware.org
Subject: [Bug debuginfod/28204] extend webapi / verification with forthcoming
 signed-contents archives
Date: Fri, 25 Aug 2023 15:24:46 +0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: elfutils
X-Bugzilla-Component: debuginfod
X-Bugzilla-Version: unspecified
X-Bugzilla-Keywords: 
X-Bugzilla-Severity: normal
X-Bugzilla-Who: mark at klomp dot org
X-Bugzilla-Status: ASSIGNED
X-Bugzilla-Resolution: 
X-Bugzilla-Priority: P2
X-Bugzilla-Assigned-To: rgoldber at redhat dot com
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags: 
X-Bugzilla-Changed-Fields: 
Message-ID: <bug-28204-10460-ezg20JAdhW@http.sourceware.org/bugzilla/>
In-Reply-To: <bug-28204-10460@http.sourceware.org/bugzilla/>
References: <bug-28204-10460@http.sourceware.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: http://sourceware.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
List-Id: <elfutils-devel.sourceware.org>

https://sourceware.org/bugzilla/show_bug.cgi?id=3D28204

--- Comment #24 from Mark Wielaard <mark at klomp dot org> ---
BTW. How does this interact with the "section" queries?

If the server doesn't support "section" then the debuginfod-client fallback=
 to
fetching "debuginfo" or "executable" should do the signature checking.

But there doesn't seem to be a way to make (client side) signature checking
work when fetching "section". Does this mean that in enforcing mode we alwa=
ys
need to use the fallback mode?

--=20
You are receiving this mail because:
You are on the CC list for the bug.=