signing.rb

Path: lib/hoe/signing.rb
Last Update: Fri Feb 12 11:47:51 +0000 2021

Signing plugin for hoe.

Tasks Provided:

generate_key:Generate a key for signing your gems.

Extra Configuration Options:

signing_key_file:Signs your gems with this private key.
signing_cert_file:Signs your gem with this certificate.

Usage:

Run the ‘generate_key’ task. This will:

  1. Configure your ~/.hoerc.
  2. Generate a signing key and certificate.
  3. Install the private key and public certificate files into ~/.gem.

Hoe will now generate signed gems when the package task is run. If you have multiple machines you build gems on, be sure to install your key and certificate on each machine.

Keep your private key secret! Keep your private key safe!

To make sure your gems are signed run:

  rake package; tar tf pkg/yourproject-1.2.3.gem

If your gem is signed you will see:

  data.tar.gz
  data.tar.gz.sig
  metadata.gz
  metadata.gz.sig

[Validate]