Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Digitally Sign tar.gz file

I need to digitally sign a tar.gz file, and have no idea how to do it. I understand the concept, and I know how to sign a jar/zip file. But I cannot find a way that will work with a tar.gz file.

Can anyone point me in the right direction, or tell me why this cannot be done?

Thanks!

like image 991
lanrat Avatar asked Aug 24 '11 22:08

lanrat


People also ask

What can you do with a Tar GZ file?

Tar GZ files are most commonly used for: Storing multiple files in one archive. Sending and receiving larger files in a compressed format. Compressing single files to store locally.

What is Tar GZ ASC file?

tar. gz. asc - The files that end in . asc are ASCII files that contain a GPG key which you can use to confirm the authenticity of the other files within that directory.


1 Answers

One of the options is to use detached signature using an OpenPGP key or X.509 certificate. Both GnuPG and OpenSSL should be able to produce detached signatures. Of course, you will get a separate file with the signature, but this is the only viable option, as for me.

like image 146
Eugene Mayevski 'Callback Avatar answered Sep 30 '22 17:09

Eugene Mayevski 'Callback