[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: gpg passphrase and package building



On Wed, Jul 24, 2002 at 11:47:50AM -0400, christophe barbé wrote:
> When building a package, the description file and the changes file are
> signed separately.

> Has anyone a good solution to type only one time his gpg passphrase when
> building a package.

The second signed file includes checksum information from the first
signed file, so they cannot both be signed at the same time.  The only
way to type your passphrase only once is for your build scripts (e.g.,
dpkg-buildpackage) to store the passphrase in memory between invocations
of gpg.  This is generally regarded as a bad idea.

Steve Langasek
postmodern programmer

Attachment: pgp3LZT7pt2S0.pgp
Description: PGP signature


Reply to: