Regarding (4),
Once you've created the signature file, simply prepend text to it in front of
the
-----BEGIN PGP SIGNATURE-----
line. You can have something like
Signature by Release Manager Jordan Zimmerman
Public Key Certificate:
<https://people.apache.org/keys/committer/randgalt.asc>
-----BEGIN PGP SIGNATURE-----
[ ... ]
I suppose it would be useful to also link to a page on how to check the
signature.
It seems strange to have that in the clear, but it is harmless.
I just confirmed that text in front of the initial ASCII armor line is simply
ignored by GnuPG and I suspect all other PGP signature verification
implementations.
- Dennis
PS: Here's a page that describes how to check, although a group of keys is
recommended in that case:
<http://www.openoffice.org/download/checksums/3.4.1_checksums.html#howto>.
-----Original Message-----
From: Jordan Zimmerman [mailto:[email protected]]
Sent: Wednesday, May 01, 2013 15:54
To: [email protected]
Subject: Re: [CANCEL] [VOTE] Release Apache Curator 2.0.0-incubating (updated)
> 1. Add a UID having your Apache ID, randgalt@ apache.org, in that PGP
> public-key certificate. You can indicate that it is your preference for code
> signing, if you desire.
That UID is there already. Can you explain what's missing?
> 2. Log into your randgalt@ a.o profile at <https://id.apache.org/> and
> provide the fingerprint of your key as part of your profile.
done
> 3. BONUS RECOMMENDATION. Do not put a copy of the public key in the
> repository.
Already removed. My .asc file should show up in /keys/committer/ soon.
> 4. GRAND PRIZE RECOMMENDATION. For all external signatures that you create,
> add to the ascii-armored signature text (outside of the armor) a link to
> <https://people.apache.org/keys/committer/randgalt.asc>.
No comprende. I'll research how to do this.
-JZ
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
