[lug] gpg question

[Neal McBurnett]

tmp:919)gpg --help | more        
...
 -s, --sign [file]                make a signature
     --clearsign [file]           make a clear text signature
 -b, --detach-sign                make a detached signature
 -e, --encrypt                    encrypt data
 -c, --symmetric                  encryption only with symmetric cipher

So you want "-ba" rather than "-sa".  "-s" puts the whole thing in one
base64-encoded file, as you would see if you did "gpg -o /tmp/q
foo.txt.asc" on the one our created.

Neal McBurnett <neal at bcn.boulder.co.us>
http://bcn.boulder.co.us/~neal/
GPG/PGP signed and/or sealed mail encouraged.  Keyid: 2C9EBA60


On Fri, Jan 18, 2002 at 03:03:55PM -0700, Scott A. Herod wrote:
> Hello,
> 
> I'm trying to figure out gnupg finally and was curious about signing
> files.  Is there a way to generate an external signature file which
> verifies some file?  In particular, I create a file foo.txt which I 
> want to sign.  I wish to send the file foo.txt and the signature file,
> presumably foo.txt.asc, so that the recipient can verify that yes, 
> I sent them the files and furthermore the foo.txt they received is
> the one I sent.
> 
> "gpg -sa foo.txt" appears to generate the signature file but
> "gpg --verify foo.txt.asc foo.txt" errors and
> "gpg --verify foo.txt.asc" says ok regardless of whether I edit
> foo.txt after creating the .asc file.
> 
> What is the correct way to do this?
> 
> Thanks
> 
> Scott
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug