[Panel-devel] Signing superkaramba themes

[Petri Damsten]

Hi,

I think that KNewStuffSecure doesn't work very well with zip files (adds a 
layer to just complicate things). I was thinking more like jar signing:
http://java.sun.com/j2se/1.3/docs/tooldocs/win32/jarsigner.html

In this case we could use existing tools. Something like this added to zip:
md5sum --binary * | gpg --clearsign 1> SIGNATURE

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

d41d8cd98f00b204e9800998ecf8427e *SIGNATURE
5ae654b95a9cc70ac391753c9dd9d59b *grid_net.png
fb03862aae7035f78b0394543a653773 *maindata.xml
a53feef70b53ea7fef088834d71f0b63 *net.theme
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFCmrtnvZDJ0CPrXBoRAjwZAJ94uK7jRgwSY3/BF91ge70iQa4Z8gCfX+s0
VgvrI4ReXGsMvyA7r2wmQBM=
=QNaV
-----END PGP SIGNATURE-----

Could KNewStuffSecure support also this kind of signing (No packaging data to 
yet another archive). 

I think that KOffice also uses zip files to save documents (kostore). Do they 
have some way of signing documents?

Petri
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mail.kde.org/pipermail/panel-devel/attachments/20050530/43ba4cb6/attachment.pgp