explain about crypto signatures

properly rename "package signatures" into "update signature".

1 files changed, 13 insertions, 4 deletions

diff --git a/share/man/man7/packages.7 b/share/man/man7/packages.7
index 6ccad60cd8c..76afdb3dfb0 100644
--- a/share/man/man7/packages.7
+++ b/share/man/man7/packages.7
@@ -1,4 +1,4 @@
-.\" $OpenBSD: packages.7,v 1.33 2014/01/20 05:07:49 schwarze Exp $
+.\" $OpenBSD: packages.7,v 1.34 2014/02/14 14:27:23 espie Exp $
 .\"
 .\" Copyright (c) 2000 Marc Espie
 .\"
@@ -24,7 +24,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: January 20 2014 $
+.Dd $Mdocdate: February 14 2014 $
 .Dt PACKAGES 7
 .Os
 .Sh NAME
@@ -66,6 +66,13 @@ Also, most
 .Ox
 developers concentrate on making the release as safe as possible and,
 correspondingly, human resources for the ports tree are somewhat lacking.
+.Pp
+Starting with
+.Ox 5.5 ,
+packages are now signed using
+.Xr pkg_sign 1 :
+understand that this is only a basic guarantee that the binary package 
+can't be tampered with while in transit.
 .Sh MANAGING FILES
 The package systems offers some strong warranties.
 .Ss "Installing a package won't erase existing files"
@@ -160,10 +167,11 @@ will look at those dependencies to
 decide when to perform an update.
 .Pp
 The full version (package name and dependency names) is known as the
-package signature, and can be queried with
+.Sq update signature ,
+and can be queried with
 .Nm pkg_info Fl S ,
 for packages, or
-.Nm make Ar print-package-signature
+.Nm make Ar print-update-signature
 for ports.
 .Pp
 Additionally, some packages with similar names and different versions may
@@ -246,6 +254,7 @@ functional.
 .Xr pkg_add 1 ,
 .Xr pkg_delete 1 ,
 .Xr pkg_info 1 ,
+.Xr pkg_sign 1 ,
 .Xr tar 1 ,
 .Xr package 5 ,
 .Xr packages-specs 7 ,