Re: Package signing best practices?

2018-09-11 Thread Marc Espie
On Tue, Sep 11, 2018 at 12:29:11PM +, Edward Lopez-Acosta wrote: > Wasn't sure if this was better posted here or in misc@, but seemed relevant > to port authors. > > Understandably package signing should be on an air gapped system, but > pkg_sign allows for passhrases on keys. However, it

Package signing best practices?

2018-09-11 Thread Edward Lopez-Acosta
Wasn't sure if this was better posted here or in misc@, but seemed relevant to port authors. Understandably package signing should be on an air gapped system, but pkg_sign allows for passhrases on keys. However, it doesn't seem to remember the passphrase if multiple packages are provided.