Skip to content

Commit

Permalink
README: add example minisign output, and clarify (#784)
Browse files Browse the repository at this point in the history
  • Loading branch information
ee7 authored Aug 9, 2023
1 parent 6d0319a commit 5e6ddd8
Showing 1 changed file with 8 additions and 2 deletions.
10 changes: 8 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -32,9 +32,15 @@ Then run a `minisign` command in that directory:
minisign -Vm configlet_4.0.0-beta.13_linux_x86-64.tar.gz -P RWQGj6DTXgYLhKvWJMGtbDUrZerawUcyWnti9MGuWMx7VDW9DqZn2tMZ
```

where the above argument to `-P` is the configlet public key.
where the above argument to `-P` is the [configlet public key](https://github.com/exercism/configlet/blob/009dc9df9d947e71ff039ac2af0f82315dbf9073/configlet-minisign.pub).

The above command has verified the release archive if (and only if) the command's output contains `Signature and comment signature verified`.
The above command has verified the release archive if (and only if) the command's output begins with `Signature and comment signature verified`.
For example:

```text
Signature and comment signature verified
Trusted comment: timestamp:2023-08-09T10:27:15Z file:configlet_4.0.0-beta.13_linux_x86-64.tar.gz hashed
```

Then extract the archive to obtain the (now-verified) configlet executable.
You may delete the archive and the `.minisig` file.
Expand Down

0 comments on commit 5e6ddd8

Please sign in to comment.