From f069144acdb6dd02c2dbdbf64012a19f91154184 Mon Sep 17 00:00:00 2001 From: Karl Berry Date: Fri, 15 May 2020 14:58:16 +0000 Subject: verify signed file as with TLCrypto::gpg_verify_signature git-svn-id: svn://tug.org/texlive/trunk@55147 c570f23f-e606-0410-a88d-b1316a301751 --- Master/tlpkg/gpg/tl-key-extension.txt | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) (limited to 'Master/tlpkg/gpg') diff --git a/Master/tlpkg/gpg/tl-key-extension.txt b/Master/tlpkg/gpg/tl-key-extension.txt index 0ceeab2c69d..6c4569a410f 100644 --- a/Master/tlpkg/gpg/tl-key-extension.txt +++ b/Master/tlpkg/gpg/tl-key-extension.txt @@ -43,7 +43,17 @@ svn/git commit # texlive.asc, see above how to export it) gpg --homedir ~texlive/.gnupg --import texlive.asc +# can view that .asc with: +gpg --show-keyring texlive.asc + +# update web-accessible public key, keeping old files but updating symlink: +cp texlive.asc ~www/texlive/files/texlive`date +%Y`.asc +ln -s texlive`date +%Y`.asc ~www/texlive/files/texlive.asc More info: -. we use tlpkg/bin/tl-sign-file to sign texlive.tlpdb. -. gpg --verify --verbose foo.asc for info on signature of file. +. we use tlpkg/bin/tl-sign-file to sign texlive.tlpdb.sha512. +. gpg --verify --verbose foo.asc for info on signature file. +. but exit status is zero even with expired keys; to check, + use --status-file and inspect: +gpg --verify --verbose --status-file=/tmp/st foo.asc +. see tl-sign-file or TLCrypto.pm for full implementation. -- cgit v1.2.3