File: signing.rb

# signing.rb

Path: | lib/hoe/signing.rb
Last Update: | Tue Mar 30 02:07:04 -0600 2010

Signing plugin for hoe.

### Tasks Provided:

generate_key: | Generate a key for signing your gems.

### Extra Configuration Options:

signing_key_file: | Signs your gems with this private key.
signing_cert_file: | Signs your gem with this certificate.

### Usage:

Run the ‘generate_key’ task. This will:

1. Configure your ~/.hoerc.
2. Generate a signing key and certificate.
3. Install the private key and public certificate files into ~/.gem.
4. Upload the certificate to RubyForge.

Hoe will now generate signed gems when the package task is run. If you have multiple machines you build gems on, be sure to install your key and certificate on each machine.

Keep your private key secret! Keep your private key safe!

To make sure your gems are signed run:

      rake package; tar tf pkg/yourproject-1.2.3.gem

If your gem is signed you will see:

      data.tar.gz
      data.tar.gz.sig
      metadata.gz
      metadata.gz.sig

[Validate]