On Sat, Jun 30, 2007 at 10:52:57PM -0700, Brian Morris wrote: > On 6/29/07, Bill Allombert <[EMAIL PROTECTED]> wrote: > >On Mon, Jun 25, 2007 at 10:33:39PM -0700, Brian Morris wrote: > > > > >Next time, please sign the whole tarball. This prevents tampering by > >third party (which is more of a concern than tampering done by yourself). > > > that's why i wanted to sign the deb files with debsigs. (even though > nobody apparently uses this it looks like *everyone* *should*) > > I don't know how to sign a tarball like that. Would you tell more specific, > exactly what command you are using ?
Sure: gpg --detach-sign --armor cross.tar.gz will give you a cross.tar.gz.asc file. Cheers, -- Bill. <[EMAIL PROTECTED]> Imagine a large red swirl here. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]