Add pgp-wrapper example
#68
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
wiktor-k
force-pushed
the
wiktor/pgp-wrapper
branch
from
d9756ed to
8d6ff16
Compare
Creates an OpenPGP certificate based on the SSH key and allows signing files emitting OpenPGP framed packets. Requires that the first key in SSH is ed25519 (see `ssh-add -L`). Generate a key with: `cargo run --example pgp-wrapper generate "John Doe <[email protected]>" > key.pgp` Sign data using: `cargo run --example pgp-wrapper sign < Cargo.toml > Cargo.toml.sig` Import the certificate using GnuPG: ```sh $ gpg --import key.pgp gpg: key A142E92C91BE3AD5: public key "John Doe <[email protected]>" imported gpg: Total number processed: 1 gpg: imported: 1 ``` Verify the signature using GnuPG: ```sh $ gpg --verify Cargo.toml.sig gpg: assuming signed data in 'Cargo.toml' gpg: Signature made Fri May 10 11:15:53 2024 CEST gpg: using EDDSA key 4EB27E153DDC454364B36B59A142E92C91BE3AD5 gpg: Good signature from "John Doe <[email protected]>" [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 4EB2 7E15 3DDC 4543 64B3 6B59 A142 E92C 91BE 3AD5 ``` Works perfectly in conjunction with `openpgp-card-agent.rs`! Signed-off-by: Wiktor Kwapisiewicz <[email protected]>
wiktor-k
force-pushed
the
wiktor/pgp-wrapper
branch
from
8d6ff16 to
6981c15
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Creates an OpenPGP certificate based on the SSH key and allows signing files emitting OpenPGP framed packets.
Requires that the first key in SSH is ed25519 (see
ssh-add -L).Generate a key with:
cargo run --example pgp-wrapper generate "John Doe <[email protected]>" > key.pgpSign data using:
cargo run --example pgp-wrapper sign < Cargo.toml > Cargo.toml.sigImport the certificate using GnuPG:
$ gpg --import key.pgp gpg: key A142E92C91BE3AD5: public key "John Doe <[email protected]>" imported gpg: Total number processed: 1 gpg: imported: 1Verify the signature using GnuPG:
Works perfectly in conjunction with
openpgp-card-agent.rs!