blob: f07fb20355e79ded30c473bc147238acde6bb761 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
|
#!/bin/sh
#
# $OpenBSD: signify.sh,v 1.8 2016/09/03 12:23:02 espie Exp $
srcdir=$1
pubkey="$srcdir/regresskey.pub"
seckey="$srcdir/regresskey.sec"
orders="$srcdir/orders.txt"
forgery="$srcdir/forgery.txt"
set -e
cat $seckey | signify -S -s - -x test.sig -m $orders
diff -u "$orders.sig" test.sig
signify -V -q -p $pubkey -m $orders
signify -V -q -p $pubkey -m $forgery 2> /dev/null && exit 1
signify -S -s $seckey -x confirmorders.sig -e -m $orders
signify -V -q -p $pubkey -e -m confirmorders
diff -u $orders confirmorders
sha256 $pubkey $seckey > HASH
sha512 $orders $forgery >> HASH
signify -S -e -s $seckey -m HASH
rm HASH
signify -C -q -p $pubkey -x HASH.sig
tar zcPf archive.tgz $srcdir
signify -zS -s $seckey -m archive.tgz -x signed.tgz
# check it's still valid gzip
gunzip -t signed.tgz
# verify it
signify -zV -p $pubkey <signed.tgz|gunzip -t
true
|
