[gnutls-devel] GnuTLS | release automation (#702)

[Development of GNU's TLS library]

> with hardest being 2 as the builder will need to access the release gpg keys

Well, yes. By no means should you put your private key outside your 100% trusted zone.

You have a web server running under your control (or trusted by you) ? Then you could set up a small service that takes a file and returns the signature file created with your gpg private key.
Consider creating a separate gpg key just for signing.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/issues/702#note_156298458
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20190402/86ca5870/attachment-0001.html>