toptional gpg signing of release file (defaults to True) - amprolla - devuan's apt repo merger HTML git clone git://parazyd.org/amprolla.git DIR Log DIR Files DIR Refs DIR README DIR LICENSE --- DIR commit 740333927d14cfef6d09e196b2b74c1d60faa146 DIR parent 28a1381c596bc63d5aac5fcfe9ce27b3e69df242 HTML Author: parazyd <parazyd@dyne.org> Date: Tue, 6 Jun 2017 22:47:31 +0200 optional gpg signing of release file (defaults to True) Diffstat: M lib/release.py | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) --- DIR diff --git a/lib/release.py b/lib/release.py t@@ -12,9 +12,10 @@ from lib.config import release_keys, checksums, signingkey from lib.parse import parse_release_head -def write_release(oldrel, newrel, filelist, r): +def write_release(oldrel, newrel, filelist, r, sign=True): """ Generates a valid Release file + if sign=False: do not use gnupg to sign the file Arguments taken: oldrel, newrel, filelist, r * location of the old Release file (used to take metadata) t@@ -50,7 +51,8 @@ def write_release(oldrel, newrel, filelist, r): new.close() - sign_release(newrel) + if sign: + sign_release(newrel) def sign_release(infile): t@@ -62,10 +64,9 @@ def sign_release(infile): stream = open(infile, 'rb') # Clearsign - signed_data = gpg.sign_file(stream, keyid=signingkey, clearsign=True, - detach=False, - output=infile.replace('Release', 'InRelease')) + gpg.sign_file(stream, keyid=signingkey, clearsign=True, detach=False, + output=infile.replace('Release', 'InRelease')) # Detached signature (somewhat broken?) - # signed_data = gpg.sign_file(stream, keyid=signingkey, clearsign=False, - # detach=True, output=infile + '.gpg') + # gpg.sign_file(stream, keyid=signingkey, clearsign=False, detach=True, + # output=infile + '.gpg')