Using gpg to add digital signature to a linux executable
Robert J. Hansen
rjh at sixdemonbag.org
Wed Oct 27 00:24:22 CEST 2021
> Why not do a detached signature using e.g. gpg -sb --output file.sig
> file? Then, someone can run gpg --verify file.sig file to ensure that
> the signature is valid.
(a) because the OP specifically said he was looking for integrated
(b) detached signatures have a way of getting lost, not distributed with
the executables, and so on.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 236 bytes
Desc: OpenPGP digital signature
More information about the Gnupg-users