Osamu Aoki wrote:
> On Thu, Dec 04, 2008 at 12:26:31PM +0000, Magnus Therning wrote:
>> At work I want to add signing to our automatic build system. In
>> theory it's a simple application of `gpg` at the end of building to
>> get a detached signature would do, but I'm weary of sticking the
>> secret key on the build servers. I'd feel a bit more safe if the
>> signing could be done on a separate server. However, the built files
>> are large and I don't want to introduce a bottle neck by transfering
>> all files back and forth over the network.
>
> Are you sigining each file or signing like what we do at Debian.
>
> If you install devscripts package, there is "debsign" to sign *.dsc
> properly while creating right *.changes
>
> Thisallow us to sign package build on remote machine safely.
I need to sign each file.
/M
--
Magnus Therning (OpenPGP: 0xAB4DFBA4)
magnus＠therning．org Jabber: magnus＠therning．org
http://therning.org/magnus
Haskell is an even 'redder' pill than Lisp or Scheme.
-- PaulPotts
Attachment:
signature.asc
Description: OpenPGP digital signature