pkgsrc/security/netpgpverify/files/sshtest-20140202
agc 78d868bcc7 Update security/netpgpverify to version 20140202
Changes from previous version:

Add the ability for netpgpverify to verify ssh-pub-key-based signatures.

It is much more likely for ssh (rather than pgp) keys to be available,
and used, as a source of authentication data.  These changes add the
ability for netpgpverify(1) -- the standalone, zero-prereq utility -
to verify signatures made by netpgp when using ssh keys.

Running the regression tests in WRKDIR gives the following output:

	% mk -f *.bsd tst
	./netpgpverify -k pubring.gpg NetBSD-6.0_RC1_hashes.asc
	Good signature for NetBSD-6.0_RC1_hashes.asc made Thu Aug 23 11:47:50 2012
	signature     4096/RSA (Encrypt or Sign) 064973ac4c4a706e 2009-06-23
	fingerprint   ddee 2bdb 9c98 a0d1 d4fb dbf7 0649 73ac 4c4a 706e
	uid           NetBSD Security Officer <security-officer@NetBSD.org>

	./netpgpverify -k pubring.gpg NetBSD-6.0_RC1_hashes.gpg
	Good signature for NetBSD-6.0_RC1_hashes.gpg made Thu Mar 14 13:32:59 2013
	signature     4096/RSA (Encrypt or Sign) 064973ac4c4a706e 2009-06-23
	fingerprint   ddee 2bdb 9c98 a0d1 d4fb dbf7 0649 73ac 4c4a 706e
	uid           NetBSD Security Officer <security-officer@NetBSD.org>

	./netpgpverify -v
	netpgpverify portable 20140202
	./netpgpverify -S sshtest-20140202.pub data.gpg
	Good signature for data.gpg made Mon Feb  3 17:54:21 2014
	signature     4096/RSA (Encrypt or Sign) 4d129225945bbb8f 1970-01-01
	fingerprint   874b 75de d6a3 341f 2d5a 2219 4d12 9225 945b bb8f
	uid           netbsd-001.cupertino.alistaircrooks.com (sshtest-20140202.pub) <agc@netbsd-001.cupertino.alistaircrooks.com>

	./netpgpverify -S sshtest-20140202.pub data.sig
	Good signature for data.sig made Sun Feb  2 21:45:05 2014
	signature     4096/RSA (Encrypt or Sign) 4d129225945bbb8f 1970-01-01
	fingerprint   874b 75de d6a3 341f 2d5a 2219 4d12 9225 945b bb8f
	uid           netbsd-001.cupertino.alistaircrooks.com (sshtest-20140202.pub) <agc@netbsd-001.cupertino.alistaircrooks.com>

	expected failure, to check bad signatures fail to verify
	sed -e 's|A|B|' data.gpg | ./netpgpverify -S sshtest-20140202.pub
	Signature did not match contents -- Signature on data did not match
	*** Error code 1 (ignored)
	%

A new HOWTO file is provided in the sources (files/HOWTO) to show how
to sign data using ssh keys and netpgp(1).
2014-02-04 02:11:18 +00:00

51 lines
3.2 KiB
Text

-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----