Re: [opensuse-packaging] A way to provide gpg key?

2006-11-09 Thread Henne Vogelsang
Hi,

On Thursday, November 09, 2006 at 21:02:52, Marcus Rueckert wrote:

> On 2006-11-09 20:50:13 +0100, Anders Norrbring wrote:
> > >Just remove the passphrase from your key.  It does not make any sense to
> > >encrypt your private key with a passphrase and then store this passphrase
> > >somewhere on the disk for a batch process.
> > 
> > Hmm.. That would be a good point.. ;)  I didn't realize that gpg / 
> > rpmbuild accepted passphrase-free keys. I'll look at it!
> 
> better look at henne's suggestion.

#!/bin/bash

UPLOAD_DIR=/local/upload

for file in `find $UPLOAD_DIR -type f -name "*.rpm"`; do
SIG=`rpm --nosignature -q --qf '%{SIGGPG}\n' -p $file`
if [ $SIG == \(none\) ]; then
TOSIGN="$file $TOSIGN"
fi
done

if [ -z "$TOSIGN" ]; then
echo "no packages without a signature"
exit 0
fi

echo "packages to sign"
echo $TOSIGN

echo "adding signature to rpm"
rpm --addsign $TOSIGN

that will sign all rpm's in /local/upload without a signature with your
default key (setup in ~/.rpmmacros).

Henne

-- 
Henne Vogelsang,  http://hennevogel.de
"To die. In the rain. Alone."
   Ernest Hemingway
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-packaging] A way to provide gpg key?

2006-11-09 Thread Marcus Rueckert
On 2006-11-09 20:50:13 +0100, Anders Norrbring wrote:
> >Just remove the passphrase from your key.  It does not make any sense to
> >encrypt your private key with a passphrase and then store this passphrase
> >somewhere on the disk for a batch process.
> 
> Hmm.. That would be a good point.. ;)  I didn't realize that gpg / 
> rpmbuild accepted passphrase-free keys. I'll look at it!

better look at henne's suggestion.

darix

-- 
   openSUSE - SUSE Linux is my linux
   openSUSE is good for you
   www.opensuse.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse-packaging] A way to provide gpg key?

2006-11-09 Thread Anders Norrbring

Robert Schiele skrev:

On Thu, Nov 09, 2006 at 07:29:22PM +0100, Anders Norrbring wrote:
Is there a way to automatically provide the passkey to gpg and rpmbuild 
when using the 'build' scripts?
Many times I build packages for both i586 and x86_64 and SUSE versions 
9.3 -> 10.1 and SLES9 & 10.
It would be really nice to automate all the passkey entries so I can run 
it all in one batch.


Just remove the passphrase from your key.  It does not make any sense to
encrypt your private key with a passphrase and then store this passphrase
somewhere on the disk for a batch process.



Hmm.. That would be a good point.. ;)  I didn't realize that gpg / 
rpmbuild accepted passphrase-free keys. I'll look at it!


--

Anders Norrbring
Norrbring Consulting


smime.p7s
Description: S/MIME Cryptographic Signature


Re: [opensuse-packaging] A way to provide gpg key?

2006-11-09 Thread Robert Schiele
On Thu, Nov 09, 2006 at 07:29:22PM +0100, Anders Norrbring wrote:
> Is there a way to automatically provide the passkey to gpg and rpmbuild 
> when using the 'build' scripts?
> Many times I build packages for both i586 and x86_64 and SUSE versions 
> 9.3 -> 10.1 and SLES9 & 10.
> It would be really nice to automate all the passkey entries so I can run 
> it all in one batch.

Just remove the passphrase from your key.  It does not make any sense to
encrypt your private key with a passphrase and then store this passphrase
somewhere on the disk for a batch process.

Robert

-- 
Robert Schiele
Dipl.-Wirtsch.informatiker  mailto:[EMAIL PROTECTED]

"Quidquid latine dictum sit, altum sonatur."


pgpTgoBfexhbt.pgp
Description: PGP signature


Re: [opensuse-packaging] A way to provide gpg key?

2006-11-09 Thread Henne Vogelsang
Hi,

On Thursday, November 09, 2006 at 19:29:22, Anders Norrbring wrote:

> Is there a way to automatically provide the passkey to gpg and rpmbuild 
> when using the 'build' scripts?

How about not signing them during building but use rpm --addsign later.

Henne 

-- 
Henne Vogelsang,  http://hennevogel.de
"To die. In the rain. Alone."
   Ernest Hemingway
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[opensuse-packaging] A way to provide gpg key?

2006-11-09 Thread Anders Norrbring
Is there a way to automatically provide the passkey to gpg and rpmbuild 
when using the 'build' scripts?
Many times I build packages for both i586 and x86_64 and SUSE versions 
9.3 -> 10.1 and SLES9 & 10.
It would be really nice to automate all the passkey entries so I can run 
it all in one batch.

--

Anders Norrbring
Norrbring Consulting


smime.p7s
Description: S/MIME Cryptographic Signature