Re: Packages getting created without signature
Peter Pentchev wrote:
> Well, there's always gpg-agent, of course... isn't this pretty much
> what it was *written* for? :)
Yes, but gpg-agent is a short term temporary volatile cache! Which is very
different from putting your passphrase in the ENVIRONMENT or a script.
--
Colin Tuckley | +44(0)1903 236872 | PGP/GnuPG Key Id
Debian Developer | +44(0)7799 143369 | 0x1B3045CE
Try to learn from other people's mistakes, you haven't time to make them all
yourself! - Anon
Reply to: