| 23 Nov 2020 |
|  kempe left the room. | 21:17:03 |
| kempe joined the room. | 21:18:32 |
| 24 Nov 2020 |
|  jochensp1 left the room. | 02:46:27 |
| kempe left the room. | 02:48:43 |
| kempe joined the room. | 03:02:42 |
| kempe left the room. | 05:26:21 |
| kempe joined the room. | 05:26:56 |
 cdesai | we ran into an interesting problem - our fdroid repo's microg updates wouldn't get installed due to signature spoofing | 12:38:18 |
| cdesai | I came up with https://gitlab.com/cde/fdroidserver/-/commit/5194ff8b869555b93697c42c95a6c93d48bb0906 as a workaround | 12:38:26 |
| cdesai | basically what signature spoofing does is make the OS pretend that the app is signed with google's key for apps that check signature of the play services app, which here is microg | 12:39:09 |
| cdesai | the microg repo appears to do something similar - http://microg.org/fdroid/repo/index-v1.json (look for "sig") | 12:39:28 |
| cdesai | suggestions / thoughts? | 12:40:23 |
| cdesai | there's another problem where our microg repos are signed with different keys for different devices - so for that I'll just have to create per-device fdroid repos, since the "sig" for all of them would have to be the same due to spoofing | 12:40:53 |
 _hc | sigh signature spoofing... not pretty but I guess it has to be | 13:28:27 |
| _hc | seems easiest to manage that in a patch to your local fdroidserver | 13:28:58 |
| cdesai | yeah, for now I'm just cloning the upstream and applying it - same patch applies on 1.1.0, 2.0a0 and master just fine | 13:30:04 |
|  vancz left the room. | 14:06:44 |
| vancz joined the room. | 14:10:37 |
|  donfede left the room. | 14:47:18 |
|  glennmen left the room. | 16:01:14 |
|  rocketnine joined the room. | 21:32:27 |
| 25 Nov 2020 |
| jochensp1 joined the room. | 02:42:46 |
| jochensp1 left the room. | 02:45:28 |
 jochensp | _hc: hi, could we fix https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=923634 and also have a new fdroidserver in unstable? | 09:02:50 |
| _hc | jochensp: fdroidserver 2.0a could go in, if you want to take that on | 09:08:56 |
| jochensp | sure, anything against just adding gradlew-fdroid? | 09:09:22 |
| _hc | I'm not likely to take on fixing that bug. I believe there is an issue about it in the fdroidserver issue tracker | 09:09:50 |
| _hc | basically, the change should be simple, but will require testing on all the possible ways to install | 09:10:21 |
| _hc | or could just patch it in Debian | 09:10:33 |
| jochensp | I would patch it in Debian | 09:11:02 |
