-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Thu, 11 Mar 2004 14:04:35 +0100 Source: dpkg-sig Binary: dpkg-sig Architecture: source all Version: 0.7 Distribution: unstable Urgency: low Maintainer: Andreas Barth <aba@not.so.argh.org> Changed-By: Marc 'HE' Brockschmidt <he@debian.org> Description: dpkg-sig - create and verify signatures on .deb-files Closes: 236183 236185 Changes: dpkg-sig (0.7) unstable; urgency=low . * HE: - dpkg-sig: + Config file handling: Strip enclosing "s. + Die if gpg fails to sign. (Closes: #236183) + Rename get_md5_sums to get_md5sums. + Don't die when parsing a deb and reading a newline where we actually expected an ar header (can happen if people change stuff with vi). (Closes: #236185) + Cache md5sums in get_md5sums. + Don't ask for a passphrase if both -p/DPKGSIG_CACHE_PASS and -f are used (use the passphrase from the file specified with -f in that case) + Don't use die() if not needed for the weird stuff in eval{}. Created the cute _die() function to do that. + Added a "--remote-dpkg-sig" (also available as "-r") switch to allow users to specify where the dpkg-sig executable is. This is useful if you're not able to get the remote admin to install dpkg-sig. + Rearranged the main routine to drop duplicated code + Aliased add_file_to_ar_archive to add_sig_to_deb + add_sig_to_deb now starts a new ar archive if the file it should write to hasn't existed before. + New switches --get-hashes, --sign-hashes and --write-signature (also available as -h, -d and -w) The first one creates an archiv of hashes of a deb/changes, the second signs it (wherever you want) and the third one adds the signatures to the deb(s and corrects the changes file). + Make standard output more verbose. + Notice when people try dpkg-sig --sign foo --sign-changes *deb (--sign-changes uses an optional argument). Assume that this wasn't meant, choose yes for --sign-changes and process the files as other cli arguments. . - dpkg-sig.1: + Document the new --remote-dpkg-sig stuff. + Document the new --get-hashes, --sign-hashes and --write-signature options. + Converted to POD, now available as dpkg-sig.pod . - dpkg-sig.pod: + Added (converted from dpkg-sig.1) . - debian/control: + Build-Depend on perl, we need pod2man to create the manpage. . - debian/rules: + Create manpage from dpkg-sig.pod Files: f761027f53bbffc644c366b8059a7404 556 devel optional dpkg-sig_0.7.dsc 1ee90ba96762af204df7c4d413e9c872 32474 devel optional dpkg-sig_0.7.tar.gz d01c7b196858948ae2215a7b16c52da5 24008 devel optional dpkg-sig_0.7_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iEYEARECAAYFAkBQaS4ACgkQmO5zOp3h7rFG8gCgj4PL/onAXsLEND52UhJVyQar lp4AmgLKRrbq8nY7n5hm+wqDu595SN7J =Etp0 -----END PGP SIGNATURE----- Accepted: dpkg-sig_0.7.dsc to pool/main/d/dpkg-sig/dpkg-sig_0.7.dsc dpkg-sig_0.7.tar.gz to pool/main/d/dpkg-sig/dpkg-sig_0.7.tar.gz dpkg-sig_0.7_all.deb to pool/main/d/dpkg-sig/dpkg-sig_0.7_all.deb -- To UNSUBSCRIBE, email to debian-devel-changes-request@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
