pgp

Viewing a PGP signature on a Maven artifact

由 久未见 提交于 2019-12-08 18:09:24
问题 I'd like to manually verify the PGP signature on a Maven artifact from Central, but I don't know where to start. I see on Apache's Guide to uploading artifacts to the Central Repository that it says "we require you to provide PGP signatures for all your artifacts". And I've seen that Sonatype's Nexus Pro software mentions verifying signatures in a blog post on Nexus Pro features But I can't find any information on how to get the signatures manually. I'm familiar enough with GPG to perform the

Java signing files with BouncyCastle - Create signature of a file using secret keyring

由 坚强是说给别人听的谎言 提交于 2019-12-08 09:29:17
问题 I'm trying to write a Java program that signs a file with a private key. The program takes 3 arguments - file, secret keyring and a password. The output should be in a detached file *.bpg. The problem is that I get the following errors when I try to compile my code: C:\CNS3\BCastle>javac Sign.java Note: Sign.java uses or overrides a deprecated API. Note: Recompile with -Xlint:deprecation for details. My code is as follows: import java.io.*; import java.security.*; import java.util.Iterator;

IPSec vs OpenSSL vs PGP [closed]

由 微笑、不失礼 提交于 2019-12-08 00:06:50
问题 Closed. This question is off-topic. It is not currently accepting answers. Want to improve this question? Update the question so it's on-topic for Stack Overflow. Closed 6 years ago . IPSec is employed at the IP level, SSL at the transport level and PGP at the application level. In some lecture not it says: IPSEC: Most general solution but least flexible SSL: Still very general and some flexibility PGP: Least general but very flexibel. I guess the general refers to what kind of protocol I can

Go - Golang openpg - Create Key pair and create signature

由 廉价感情. 提交于 2019-12-07 09:46:19
问题 I'm currently working on openpgp in combination with golang. I use the following code to generate a new keypair and create a self-signature on the resulting public key: package main import ( "bytes" "crypto" "time" "golang.org/x/crypto/openpgp" "golang.org/x/crypto/openpgp/armor" "golang.org/x/crypto/openpgp/packet" "fmt" ) //Create ASscii Armor from openpgp.Entity func PubEntToAsciiArmor(pubEnt *openpgp.Entity) (asciiEntity string) { gotWriter := bytes.NewBuffer(nil) wr, errEncode := armor

Python API to fetch PGP public key from key server?

由 与世无争的帅哥 提交于 2019-12-07 08:10:55
问题 Is there any Python API which can fetch a PGP public key from the public key server? 回答1: You can use HTTP (urllib2 and beautiful soup would be my choice) if you're querying the MIT PGP keyserver. http://pgp.mit.edu/extracthelp.html 来源： https://stackoverflow.com/questions/1254425/python-api-to-fetch-pgp-public-key-from-key-server

How to automatically verify all committers PGP-sign their commit

由 蹲街弑〆低调 提交于 2019-12-07 07:19:27
问题 Github supports signing commits with a PGP key. We have an open source project, that accepts contributors from people without PGP keys. Security is essential for us, and so we decided that each person who merges pull requests will sign the merges with his PGP key, and so each actual commit will either be directly signed by the author, and/or by the merger. What is the best way to setup a continous integration build that makes sure this actually happens? We want the build to fail, alarms to go

Recommendations for Java + OpenPGP?

由 心已入冬 提交于 2019-12-07 02:32:28
问题 I want to develop a small OpenPGP client and I'm searching for a Java library for OpenPGP. Are there any (open source) recommendations for this approach? Cryptix.org does not seem alive anymore... 回答1: I found the BouncyCastle library, for Java and C#. I haven't any experiences with it. I will try it and report here. It provides: A lightweight cryptography API for Java and C#. A provider for the Java Cryptography Extension and the Java Cryptography Architecture. A clean room implementation of

Verify digital signature using php

由 我与影子孤独终老i 提交于 2019-12-06 19:52:27
I have an email which is digitally signed. email : -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The below email has been digitally signed for test purposes. We will now go on and save this signed email in our dms system. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJTnwd9AAoJEEWjhuB1kNr9dQcH/2YeZlHEfK/KOPg8XhpOY+4l 3camfFVya8JIzLHsOzhhdSqIItDr7VlGDrjrMgPPiD1abyy9zhcqZ18Kh8sUuFJV /TA434rrnMJC0xmSzXl4uo+UagyNyCjzwR4TFCGP4Ob6SzPl/jxfrcfO5yXEdF1I X6wgQUmnb3ZLczdPVXsKpwpVIGqX7diwe1CAZKxCmjZo9rr

IPSec vs OpenSSL vs PGP [closed]

由 ぐ巨炮叔叔 提交于 2019-12-06 04:29:50
Closed. This question is off-topic . It is not currently accepting answers. Want to improve this question? Update the question so it's on-topic for Stack Overflow. Closed 6 years ago . IPSec is employed at the IP level, SSL at the transport level and PGP at the application level. In some lecture not it says: IPSEC: Most general solution but least flexible SSL: Still very general and some flexibility PGP: Least general but very flexibel. I guess the general refers to what kind of protocol I can secure. With IPSEC I can secure everything that uses TCP or UDP. PGP is the least general because it

Easiest way to decrypt PGP-encrypted files from VBA (MS Access)

由 陌路散爱 提交于 2019-12-06 02:20:59
I need to write code that picks up PGP-encrypted files from an FTP location and processes them. The files will be encrypted with my public key (not that I have one yet). Obviously, I need a PGP library that I can use from within Microsoft Access. Can you recommend one that is easy to use? I'm looking for something that doesn't require a huge amount of PKI knowledge. Ideally, something that will easily generate the one-off private/public key pair, and then have a simple routine for decryption. A command line solution is good. If your database is an internal application, not to be redistributed,
订阅 pgp