Re: Call for Signatures: stretch dedication

[Ben Finney]

"Adam D. Barratt"  writes:

> On 2017-06-14 9:48, Ben Finney wrote:
> > For those who (like me) had difficulty with some of these steps, here's
> > how I eventually got it done:
>
> Out of curiosity, which step(s)? They all seem fairly
> self-explanatory, but I may well be missing something.

Not everyone knows how to do them, or may think they know but still get
it wrong, so I thought an explicit series of commands might help.

> [...]
> > $ gpg --detach-sign \
> > --local-user "$DEBSIGN_KEYID" \
> > --output "$sigfile" --armor \
> > ./dedication-9.0.txt
>
> fwiw, with the exception of the --local-user switch, which is only
> required if your Debian key isn't also your default key

My default key is my Debian signing key, nevertheless the earlier
command grabbed a completely unrelated key.

So yes, this is the step that tripped me up, so I found it easy to
believe not everyone would find every command obvious.

-- 
 \ “I was trying to daydream, but my mind kept wandering.” —Steven |
  `\Wright |
_o__)  |
Ben Finney

Re: Call for Signatures: stretch dedication

[Adam D. Barratt]

On 2017-06-14 9:48, Ben Finney wrote:

For those who (like me) had difficulty with some of these steps, here's
how I eventually got it done:


Out of curiosity, which step(s)? They all seem fairly self-explanatory, 
but I may well be missing something.


[...]

$ gpg --detach-sign \
--local-user "$DEBSIGN_KEYID" \
--output "$sigfile" --armor \
./dedication-9.0.txt


fwiw, with the exception of the --local-user switch, which is only 
required if your Debian key isn't also your default key, that's 
precisely what Jonathan's mail said to do.


Regards,

Adam

Re: Call for Signatures: stretch dedication

[Ben Finney]

Jonathan Wiltshire  writes:

> We welcome every Debian developer, maintainer, translator, or
> contributor in any other field to join us in signing this dedication.

Thanks for calling on us to make this dedication.

> If you wish to do so, please:

For those who (like me) had difficulty with some of these steps, here's
how I eventually got it done:

=
$ curl --location --remote-name-all \
https://people.debian.org/~jmw/dedication-9.0.txt
[…]

$ sha1sum ./dedication-9.0.txt
fb37a995eebad8ced194709a9a2eb7a68ad8979c  ./dedication-9.0.txt

$ sigfile="Your_Name"

$ gpg --detach-sign \
--local-user "$DEBSIGN_KEYID" \
--output "$sigfile" --armor \
./dedication-9.0.txt

$ gpg --verify "$sigfile" ./dedication-9.0.txt
gpg: Signature made Wed 14 Jun 2017 18:37:12 AEST
gpg:using RSA key A1A10BC6C2451DAC42D3B28B0EA5AC6F65D1F1F7
gpg: Good signature from "Ben Finney " [ultimate]
[…]
gpg: aka "Ben Finney (Debian Project) " 
[ultimate]
[…]

=

Then attach the resulting "$sigfile" to a message to Jonathan.

-- 
 \ “What is needed is not the will to believe but the will to find |
  `\   out, which is the exact opposite.” —Bertrand Russell, _Free |
_o__)   Thought and Official Propaganda_, 1928 |
Ben Finney