[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: GPG as a PGP replacement



Incidentally, using a dpkg-buildpackage hacked to use gpg with my RSA key, I was able to produce a signature that dinstall successfully verified. Evil patch follows.

--- /usr/bin/dpkg-buildpackage~ Wed Apr 28 22:56:38 1999
+++ /usr/bin/dpkg-buildpackage  Thu May 13 08:59:24 1999
@@ -34,7 +34,7 @@
 }

 rootcommand=''
-signcommand=pgp # Default command for signing
+signcommand=gpg # Default command for signing
 warnpgp='no'   # Display a warning to encourage switching to gpg?
 if [ ! -e $HOME/.gnupg/secring.gpg ] ; then
        warnpgp=yes
@@ -121,9 +121,9 @@
                # --textmode doesn't seem to work; we use perl to filter ^M;
                # this doesn't affect the actual signature.
                (cat "../$1" ; echo "") | \
-               $signcommand --local-user "$maintainer" --clearsign --armor \
-                       --textmode --output - - | \
-                       perl -n -p -e 's/\r$//' > "../$1.asc"
+               $signcommand --load-extension rsa --load-extension idea \
+                       --local-user "0x17d57681" --clearsign --armor \
+                       --textmode --output "../$1.asc"
        else
                $signcommand -u "$maintainer" +clearsig=on -fast <"../$1" \
                        >"../$1.asc"
--
Joel Klecker (aka Espy)                    Debian GNU/Linux Developer
<URL:mailto:jk@espy.org>                 <URL:mailto:espy@debian.org>
<URL:http://web.espy.org/>               <URL:http://www.debian.org/>


Reply to: