[Catalog-sig] [Draft] Package signing and verification process

[Donald Stufft]

On Wednesday, February 6, 2013 at 3:31 PM, Vinay Sajip wrote:
> Donald Stufft <donald.stufft <at> gmail.com (http://gmail.com)> writes:
> 
> > * Do we have bindings to GPG that we can use?
> 
> There's python-gnupg [1][2] which I maintain. I test it on Linux, Mac OS X and
> Windows. It relies on an already installed GnuPG executable being available, and
> works through the subprocess module to talk to it. It covers most GnuPG
> functions which don't require back-and-forth interaction with a user (such as
> editing keys).
> 
> Regards,
> 
> Vinay Sajip
> 
> [1] https://code.google.com/p/python-gnupg/
> [2] http://packages.python.org/python-gnupg/
> 
Yea I'm actually aware of that, However it requires installing GPG like
you said which is pretty unfriendly in general on Windows, and adds
another barrier to release. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/catalog-sig/attachments/20130206/d0461dae/attachment.html>