Mailinglist Archive: opensuse-bugs (4284 mails)

< Previous Next >
[Bug 1039899] obs-sign does not work with gpg2-2.1.21 and higher
  • From: bugzilla_noreply@xxxxxxxxxx
  • Date: Fri, 19 May 2017 12:25:36 +0000
  • Message-id: <bug-1039899-21960-HtGVLY8oEs@http.bugzilla.opensuse.org/>
http://bugzilla.opensuse.org/show_bug.cgi?id=1039899
http://bugzilla.opensuse.org/show_bug.cgi?id=1039899#c1

--- Comment #1 from Andreas Stieger <astieger@xxxxxxxx> ---
Clarification, possible for future self:

os-sign / signs signs rpm and isos. Transferring large data to signing host for
signing iso is difficult. The original patch adds functionality to use the
digests for signing. The patch in this bug fixes this with .2.1.20

Upstream request to add this option: https://dev.gnupg.org/T1646
"Include support for signing file digests (e.g. for obs-sign)"

Upstream said that the better option was to split gpg (host with data) and
gpg-agent (signing host), so that the signing key remains protected.

--
You are receiving this mail because:
You are on the CC list for the bug.
< Previous Next >
References