3 Commits

Author	SHA1	Message	Date
Matthew Barnes	a5b002dae6	ostree: Add gpg-sign command ... Signs a commit with one or more GPG keys.	2015-02-26 12:53:01 -05:00
Colin Walters	26d5db696b	tests: Fix up GPG tests for more strict EL7 GPG ... These GPG tests were failing for me on EL7 - it appears to be because we had only one directory for both private and public keys, and we were giving that to ostree for verification, which passed them onto gpgv. In EL7 beta at least, gpgv now barfs if it finds a private key where it is just expecting to find public keys. Fix this by splitting out the public trusted directory from the private key directory. Except now for signing, we still need the public key there, so symlink it. Whee!	2014-02-10 09:40:35 -05:00
Jeremy Whiting	7d5aa74dae	core: Use libgpgme to add GPG signatures to detached metadata for commit object ... Add an optional dependency on gpgme to add GPG signatures into the detached metadata, with the key "ostree.gpgsigs", as an "aay", an array of signatures (treated as binary data). The commit command gains a --gpg-sign=<key-id> argument. Also add an argument --gpg-homedir to set the GPG homedir where we look for keyrings.	2013-09-28 16:12:35 -04:00