Re: [Arx-users] Creating a signed archive

[Walter Landry]

Kevin Smith <address@hidden> wrote:
> I'm trying to play around with signed archives, and not having much
> luck.
> 
> What kind of parameter do I pass as KEY? Is it a gpg key id, or an
> actual public key, or what?

The short answer is "whatever gpg wants".  When I list keys, I get
something like

address@hidden:~$ gpg --fingerprint
/home/boo/.gnupg/pubring.gpg
----------------------------
pub  1024D/4CACD81D 2002-03-29 Walter Landry <address@hidden>
     Key fingerprint = D989 0A6D 001C 02C6 EDE6  0FD5 6811 3B52 4CAC D81D
sub  1024g/131710E9 2002-03-29

I can use either "address@hidden" or the fingerprint
D9890A6D001C02C6EDE60FD568113B524CACD81D.

> I thought I had configured my archive to be signed, but when I did a
> commit, that patch was not signed.

Does "arx archives" show a key for that archive?

> I tried to sign the patch, without success:
> 
> address@hidden arx $ arx sign --add
> Error: Transferring Files
> file:///home/arx/archive/address@hidden/arx/kevins/,0/arx.kevins,0.patch.tar.gz
> file:///home/kevins/work/arx/,,sign.20041209T022243/arx.kevins,0.patch.tar.gz
> 
> 
> I know this feature is bleeding-edge new, so I don't expect it to
> already be well documented. I'm just hoping to get a little help so I
> can play around with the feature and provide feedback.

I just made some modifications to "sign" (arx.2.1,132-135), so make
sure that you have the head revision.  The syntax changed.

Walter