Re: PGP sigs in repo

[Jim Hyslop]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dylan Martin wrote:
> I'm thinking of including pgp/gpg signing in my repository.  So, when
> I make a change, I sign the changed file and check in the signature as
> well.  Then other people and automated systems are guaranteed that I
> made the changes.
> 
> Has anyone done something like this?  Any lessons learned while doing
> it?

There is ongoing work to include gpg-signed commits automatically. Have
a look at the signed-commits branch of the CVS source.

Derek, if you're reading this - what's the current status of the signed
commits? Are they useable or testable yet?

- --
Jim Hyslop
Dreampossible: Better software. Simply.     http://www.dreampossible.ca
                 Consulting * Mentoring * Training in
    C/C++ * OOD * SW Development & Practices * Version Management
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFEQCPfLdDyDwyJw+MRAg2EAJsHKvDH4+qqnKKh2+5Oz0CQn5ZMZACgvjcc
fm+kgXZVPERZUUL/fw9kgT4=
=lFBB
-----END PGP SIGNATURE-----