Attachment 43510 Details for Bug 70410 – Manifest signing howto by genone.

Manifest signing howto by genone.

hb-guide-manifest-signing.xml (text/plain), 1.77 KB, created by Matthew Kasa (RETIRED) on 2004-11-07 20:35:43 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Matthew Kasa (RETIRED)

Created: 2004-11-07 20:35:43 UTC

Size: 1.77 KB

patch

obsolete

>ï»¿<?xml version='1.0' encoding='UTF-8'?>
><!DOCTYPE sections SYSTEM "/dtd/book.dtd">
>
>
>
>
><sections>
>
><section>
><title>How to sign Manifests?</title>
><subsection>
><body>
>
><p>
>Requirements:
></p>
><ul>
>  <li>&gt;=sys-apps/portage-2.0.51_pre10</li>
>  <li>&gt;=app-crypt/gnupg-1.2.4</li>
></ul>
>
><p>
>Key Setup:
></p>
><ul>
>  <li>
>    Create a new DSA GnuPG key with at least 1024 bit keylength, an expiration
>    period no longer than 6 months and a good passphrase.
>  </li>
>  <li>Optional: upload the key to a keyserver.</li>
></ul>
>
><p>
>Portage Configuration:
></p>
><ul>
>  <li>
>    Set <path>PORTAGE_GPG_DIR</path> to your <path>~/.gnupg/</path> directory
>    (or the directory where the keyring with your new key is).
>  </li>
>  <li>Set <path>PORTAGE_GPG_KEY</path> to the key id of your new key.</li>
>  <li>Set FEATURES="sign".</li>
></ul>
>
><p>
>Now you should be able to sign your Manifests on repoman commit.  repoman will
>ask you for your passphrase before committing the Manifest.  This step is
><e>after</e> it has committed the other files.  At the moment repoman doesn't
>check if the Manifest is already signed, so others are able to "unsign" your
>package later. This will change before signing is made mandatory.
></p>
>
></body>
></subsection>
></section>
>
><section>
><title>How to verify Manifests?</title>
><subsection>
><body>
>
><p>
>Right now portage has no verification support integrated.  A first attempt to
>check a Manifest is available for testing at
><uri>http://dev.gentoo.org/~genone/scripts/portage-gpg-verify.sh</uri>.  This is
>alpha code, very incomplete and only for testing.  Don't complain if it wipes
>your hard disk.
></p>
>
></body>
></subsection>
></section>
>
></sections>

Actions: View

Attachments on bug 70410: 43510