Gentoo Archives: gentoo-dev

From: "Michał Górny" <mgorny@g.o>
To: gentoo-dev@l.g.o
Cc: "Michał Górny" <mgorny@g.o>
Subject: [gentoo-dev] [PATCH 4/6] glep-0078: Link OpenPGP to RFC 4880
Date: Wed, 21 Sep 2022 18:18:23
Message-Id: 20220921181651.39370-5-mgorny@gentoo.org
In Reply to: [gentoo-dev] [PATCH 0/6] glep-0078: Clarifications by "Michał Górny"
1 Signed-off-by: Michał Górny <mgorny@g.o>
2 ---
3 glep-0078.rst | 10 +++++++---
4 1 file changed, 7 insertions(+), 3 deletions(-)
5
6 diff --git a/glep-0078.rst b/glep-0078.rst
7 index 3078061..a109b7f 100644
8 --- a/glep-0078.rst
9 +++ b/glep-0078.rst
10 @@ -349,9 +349,10 @@ not verify, the package manager must reject processing the corresponding
11 archive member. In particular, it must not attempt decompressing
12 compressed members in those circumstances.
13
14 -The signatures are created as binary detached OpenPGP signature files,
15 -with filename corresponding to the member filename with ``.sig`` suffix
16 -appended.
17 +The signatures are created as binary detached OpenPGP signature files
18 +as defined by RFC 4880 § 11.4 or a subsequent standard, with filename
19 +corresponding to the member filename with ``.sig`` suffix appended
20 +[#RFC-4880]_.
21
22 The exact details regarding creating and verifying signatures, as well
23 as maintaining and distributing keys are outside the scope of this
24 @@ -643,6 +644,9 @@ References
25 .. [#GLEP74] GLEP 74: Full-tree verification using Manifest files
26 (https://www.gentoo.org/glep/glep-0074.html)
27
28 +.. [#RFC4880] RFC 4880: OpenPGP Message Format
29 + (https://www.rfc-editor.org/rfc/rfc4880)
30 +
31 .. [#DEB-FORMAT] deb(5) — Debian binary package format
32 (https://manpages.debian.org/unstable/dpkg-dev/deb.5.en.html)
33
34 --
35 2.37.3