Wiki Markup |
h3. Create a code signing key
Install [GNU GPG|http://www.gnupg.org/]
Create a gpg config file eg GPG Create a gpg config file eg c:\gpg\conf\gpg.conf with the following contents: Code Block |
---|
{utf8-strings
keyserver x-hkp://pgp.surfnet.nl/
default-cert-check-level 3
keyserver-options auto-key-retrieve include-subkeys
no-mangle-dos-filenames
no-secmem-warning}
|
Set the GNUPGHOME environment var to point to that: set GNUPGHOME=\gpg\conf
gpg \ --gen-key
accept all defaults, use your apache email and a comment like "Code Signing Key", eg:
Real name: Ant Elder
Email address: antelder@apache.org
Comment: Code Signing Key
Use long hard to guess passphrase with numbers and miss spellings etc
now should be able to show that key with: gpg \ --list-keys
C:\>gpg \ --list-keys
/gpgtest/conf\pubring.gpg
\ ------------------------ \-
pub 1024D/481240F5 2007-06-28
uid Ant Elder (Code Signing Key) <antelder@apache.org>
sub 2048g/F6F122B8 uid Ant Elder (Code Signing Key) <antelder@apache.org> sub 2048g/F6F122B8 2007-06-28
Upload that to a key server using the keyid, eg gpg \ --send-key 481240F5
Now if you go to [http://pgp.surfnet.nl/ ] you should be able to search for you name and find the uploaded key
Add this key to the KEYS file in the Tuscany SVN: [https://svn.apache.org/repos/asf/incubator/tuscany/KEYS ]
eg, check out the KEYS file then update with:
(gpg \ --list-sigs antelder@apache.org && gpg \ --armor \ --export antelder@apache.org) >> KEYS
|