search

openSUSE / obs-sign

sign daemon and client for remote gpg signing.
GNU General Public License v2.0
17 stars 19 forks source link

Support sign rpm with V4 signature #40

Open TommyLike opened 2 years ago

TommyLike commented 2 years ago

obs-sign support sign rpm packages natively, considering RPM has introduced V4 signature which would bring performance improvement. Wll/Could this be supported in obs-sign?

xsuchy commented 2 years ago

This is already implemented since 9f4cf200cb4b9e3d0c267297833e323cd5ead280 But it is not documented in the man page or in --help

TommyLike commented 2 years ago

This is already implemented since 9f4cf20 But it is not documented in the man page or in --help

It looks like we need pass "-4" argument when invoke, I will have a try, thanks.

pmatilai commented 1 year ago

OpenPGP v4 and RPM v4 signatures are two entirely different things! Rpm v4 signatures are almost 20 years old by now, the "recent thing" there is not creating RPM v3 signatures by default in rpm-sign. Only creating the RPM v4 signature is much, much faster because it doesn't need to read the entire package.

OTOH commit 9f4cf200cb4b9e3d0c267297833e323cd5ead280 is about OpenPGP v4 signatures which is what OpenPGP implementations should really be defaulting to since a long time ago.