Incidentally, using a dpkg-buildpackage hacked to use gpg with my RSA
key, I was able to produce a signature that dinstall successfully
verified. Evil patch follows.
--- /usr/bin/dpkg-buildpackage~ Wed Apr 28 22:56:38 1999
+++ /usr/bin/dpkg-buildpackage Thu May 13 08:59:24 1999
@@ -34,7 +34,7 @@
}
rootcommand=''
-signcommand=pgp # Default command for signing
+signcommand=gpg # Default command for signing
warnpgp='no' # Display a warning to encourage switching to gpg?
if [ ! -e $HOME/.gnupg/secring.gpg ] ; then
warnpgp=yes
@@ -121,9 +121,9 @@
# --textmode doesn't seem to work; we use perl to filter ^M;
# this doesn't affect the actual signature.
(cat "../$1" ; echo "") | \
- $signcommand --local-user "$maintainer" --clearsign --armor \
- --textmode --output - - | \
- perl -n -p -e 's/\r$//' > "../$1.asc"
+ $signcommand --load-extension rsa --load-extension idea \
+ --local-user "0x17d57681" --clearsign --armor \
+ --textmode --output "../$1.asc"
else
$signcommand -u "$maintainer" +clearsig=on -fast <"../$1" \
>"../$1.asc"
--
Joel Klecker (aka Espy) Debian GNU/Linux Developer
<URL:mailto:[EMAIL PROTECTED]> <URL:mailto:[EMAIL PROTECTED]>
<URL:http://web.espy.org/> <URL:http://www.debian.org/>
