Commits on Aug 18, 2015

1. New implementation for signing releases …

   * Client libraries like bootlaces should not have to configure anything.
   * Signing and encrypting in Boot-clj works out of the box, with no configuration. This can be made to work because we are going to make assumptions about the end user's environment. In turn, those defaults will be capable of being overridden with environment variables.
   * Secret keyring location is the default one ($HOME/.gnupg/secring.pgp). Can be overridden with BOOT_GPG_SECRING.
   * Name/Email is the one we find. Provided the secret keyring has only one user, we can be sure that we have the correct one. If more than one are found, we throw an error. Name/Email can be set with BOOT_GPG_USER.
   * Default signing key is the first one returned by (keyring/list-public-keys keyring). This will work on a straightforward GPG setup. If the user follows best practices and has derived subkeys from his master keypair, he can set those with BOOT_GPG_SIGNING_KEY_ID and BOOT_GPG_ENCRYPTING_KEY_ID.

   

   danielsz committed Aug 18, 2015
   Configuration menu

   • View commit details
   • Copy full SHA for 391e291
   • Browse repository at this point

   Copy the full SHA

   391e291 View commit details

   Browse the repository at this point in the history