Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 608328 - app-crypt/minisign - a dead simple tool to sign files and verify signatures
Summary: app-crypt/minisign - a dead simple tool to sign files and verify signatures
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Georgy Yakovlev
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 588462
  Show dependency tree
 
Reported: 2017-02-05 13:49 UTC by Sergey S. Starikoff
Modified: 2021-04-16 04:03 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
minisign-9999.ebuild (minisign-9999.ebuild,418 bytes, text/plain)
2017-02-05 13:49 UTC, Sergey S. Starikoff 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sergey S. Starikoff 2017-02-05 13:49:49 UTC 
Created attachment 462548 [details]
minisign-9999.ebuild

minisign is the upstream-recommended tool to verify sources of net-dns/dnscrypt-proxy (see bug #588462).

$ cd /tmp
$ wget http://download.dnscrypt.org/dnscrypt-proxy/dnscrypt-proxy-1.9.4.tar.bz2.minisig
…
$ minisign -VP RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3 -x /tmp/dnscrypt-proxy-1.9.4.tar.bz2.minisig -m /usr/portage/distfiles/dnscrypt-proxy-1.9.4.tar.bz2 
Signature and comment signature verified
Trusted comment: timestamp:1484995547	file:dnscrypt-proxy-1.9.4.tar.bz2

Latest upstream release file is jedisct1-minisign-0.7-2-g4dcfeb8.tar.gz
In Gentoo terms it probably should mean =app-crypt/minisign-0.7-r2.
For initial tests I've used attached live ebuild.

Please, add it into tree.
I could take it on maintainership together with proxy team.