[gnutls-devel] GnuTLS | release automation (#702)
Development of GNU's TLS library
gnutls-devel at lists.gnutls.org
Tue Apr 2 09:19:09 CEST 2019
> with hardest being 2 as the builder will need to access the release gpg keys
Well, yes. By no means should you put your private key outside your 100% trusted zone.
You have a web server running under your control (or trusted by you) ? Then you could set up a small service that takes a file and returns the signature file created with your gpg private key.
Consider creating a separate gpg key just for signing.
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/issues/702#note_156298458
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Gnutls-devel