summaryrefslogtreecommitdiff
path: root/Master/tlpkg/gpg/tl-key-extension.txt
diff options
context:
space:
mode:
authorKarl Berry <karl@freefriends.org>2020-05-15 14:58:16 +0000
committerKarl Berry <karl@freefriends.org>2020-05-15 14:58:16 +0000
commitf069144acdb6dd02c2dbdbf64012a19f91154184 (patch)
treec73bbe38fecaebaf6efafc213bc44dcab773dc20 /Master/tlpkg/gpg/tl-key-extension.txt
parentfbd75b29567f865c5319a4f40ce81e845711232e (diff)
verify signed file as with TLCrypto::gpg_verify_signature
git-svn-id: svn://tug.org/texlive/trunk@55147 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Master/tlpkg/gpg/tl-key-extension.txt')
-rw-r--r--Master/tlpkg/gpg/tl-key-extension.txt14
1 files changed, 12 insertions, 2 deletions
diff --git a/Master/tlpkg/gpg/tl-key-extension.txt b/Master/tlpkg/gpg/tl-key-extension.txt
index 0ceeab2c69d..6c4569a410f 100644
--- a/Master/tlpkg/gpg/tl-key-extension.txt
+++ b/Master/tlpkg/gpg/tl-key-extension.txt
@@ -43,7 +43,17 @@ svn/git commit
# texlive.asc, see above how to export it)
gpg --homedir ~texlive/.gnupg --import texlive.asc
+# can view that .asc with:
+gpg --show-keyring texlive.asc
+
+# update web-accessible public key, keeping old files but updating symlink:
+cp texlive.asc ~www/texlive/files/texlive`date +%Y`.asc
+ln -s texlive`date +%Y`.asc ~www/texlive/files/texlive.asc
More info:
-. we use tlpkg/bin/tl-sign-file to sign texlive.tlpdb.
-. gpg --verify --verbose foo.asc for info on signature of file.
+. we use tlpkg/bin/tl-sign-file to sign texlive.tlpdb.sha512.
+. gpg --verify --verbose foo.asc for info on signature file.
+. but exit status is zero even with expired keys; to check,
+ use --status-file and inspect:
+gpg --verify --verbose --status-file=/tmp/st foo.asc
+. see tl-sign-file or TLCrypto.pm for full implementation.