go/goreleaser
go/goreleaser
1
0
Fork 0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-01-08 03:31:59 +02:00
Code Issues Releases Activity
b477ffa095
goreleaser/internal/pipe/sign/testdata
History
Carlos Alexandro Becker 39de856eb4
refactor: better package organization
2018-09-12 14:18:01 -03:00
..
gnupg refactor: better package organization 2018-09-12 14:18:01 -03:00
.gitignore refactor: better package organization 2018-09-12 14:18:01 -03:00
README.md refactor: better package organization 2018-09-12 14:18:01 -03:00

README.md

Creating test keys for GnuPG

The unit tests needs a test key to work with. I have tried to create a test keyring on the fly and while that worked I was not able to successfully sign with that. gpg would bail with an ioctl error which I didn't track down since using a static key works.

This uses the --homedir . option to create the test keys so that we do not touch the local keyring file.

  1. Create signing keys

    cd $GOPATH/src/github.com/goreleaser/goreleaser/internal/pipeline/sign/testdata/gnupg gpg --homedir . --quick-generate-key --batch --passphrase '' nopass default default 10y

  2. Check that the key exists

    $ gpg --homedir . --list-keys

    pub rsa2048 2017-12-13 [SC][expires: 2027-12-11] FB6BEDFCECE1761EDD68BF32EF2D274B0EDAAE12 uid [ultimate] nopass sub rsa2048 2017-12-13 [E]

  1. Check that signing works

    create a test file

    echo "bar" > foo

    sign and verfiy

    gpg --homedir . --detach-sign foo gpg --homedir . --verify foo.sig foo

    gpg: Signature made Wed Dec 13 22:02:49 2017 CET gpg: using RSA key FB6BEDFCECE1761EDD68BF32EF2D274B0EDAAE12 gpg: Good signature from "nopass" [ultimate]

    cleanup

    rm foo foo.sig

  2. Make sure you have keyrings for both gpg1 and gpg2

    travis-ci.org runs on an old Ubuntu installation which has gpg 1.4 installed. We need to provide keyrings that have the same keys and users for both formats.

    This demonstrates the conversion from gpg2 to gpg1 format but should work the same the other way around.

    get gpg version

    gpg --version gpg (GnuPG) 2.2.3 ...

    install gpg1

    brew install gpg1

    brew install gpg2 # if you have gpg1 installed

    migrate the keys from gpg2 to gpg1

    gpg --homedir . --export nopass | gpg1 --homedir . --import gpg --homedir . --export-secret-key nopass | gpg1 --homedir . --import

    check keys are the same

    gpg --homedir . --list-keys --keyid-format LONG gpg1 --homedir . --list-keys --keyid-format LONG

    gpg --homedir . --list-secret-keys --keyid-format LONG gpg1 --homedir . --list-secret-keys --keyid-format LONG