#!/bin/sh

# Example signing script. See pkg-repo(8) for more information.

set -e

read -t 2 sum

[ -z "$sum" ] && exit 1

echo SIGNATURE

echo -n "$sum" | /usr/bin/openssl dgst -sign repo.key -sha256 -binary

echo

echo CERT

cat repo.pub

echo END

#! /bin/sh

# Script to sign a package.

# Currently only pkg(7) supports checking for signed ports-mgmt/pkg package.

set -e

if [ $# -eq 0 ]; then

	echo "Usage: $0 pkg.txz" >&2

	exit 1

fi

pkg="$1"

sign_cmd="${2:-./sign.sh}"

rm -f "${pkg}.sig"

sha256 -q "${pkg}" | "${sign_cmd}" > "${pkg}.sig"