Re: Signing a .deb later?

[Charles Plessy <plessy@debian.org>]

Le Wed, Apr 04, 2012 at 07:55:09AM +0200, Thibaut Paumard a écrit :
> Le 04/04/12 01:01, Christopher Howard a écrit :
> > So, my first question: Is there some nifty command or trick to
> > (properly) GPG sign a .deb package /after/ I've finished making it?
> 
> You can't sign your binary packages. What you can sign is the .dsc
> (source package) and .changes (upload file). You sign them using debsign.

Actually, there is a binary package signing tool, but it looks rather abandonned…

http://manpages.ubuntu.com/manpages/precise/en/man1/debsig-verify.1.html

Cheers,

-- 
Charles Plessy
Tsurumi, Kanagawa, Japan