thelema/odb — pull request #53 by HappyCrow (2012-06-07 06:47:25+00:00)
Title: Gpg signature verif

Hello,

I gave it quite a lot of testing, even with a signature file hosted on the net.

To sign a tarball, given that you have a valid gnupg key pair:
gpg --detach-sign -a TARBALL
It will create TARBALL.asc
the gpg keyword in the packages file takes either an absolute path
to such a file or a URL (http://..., https://..., ftp://...).

To check a signature:
gpg --verify SIG_FILE TARBALL_FULL_PATH
the exit code is 0 in case of success, non 0 in case
of any other problem.

Regards,
F.