[Distutils] Upload signature (and signing key) after package upload

[Richard Jones]

Sorry, there's no facility at present for signing a file that's already
uploaded.

On Mon Feb 23 2015 at 10:33:49 AM Ben Finney <ben+python at benfinney.id.au>
wrote:

> Howdy all,
>
> How can I upload an OpenPGP signature (and the signing key) for a
> version, after the upload of the distribution is complete?
>
> I have recently been informed of the ‘--sign’ and ‘--identity’ options
> to the ‘upload’ command. As described here:
>
>     Signing a package is easy and it is done as part of the upload
>     process to PyPI. […]
>     <URL:https://www.davidfischer.name/2012/05/signing-and-
> verifying-python-packages-with-pgp/>
>
> Can it be done, not “as part of the upload process”, but subsequent to
> the upload of the distribution? How?
>
> --
>  \     “Try adding “as long as you don't breach the terms of service – |
>   `\          according to our sole judgement” to the end of any cloud |
> _o__)                      computing pitch.” —Simon Phipps, 2010-12-11 |
> Ben Finney
>
> _______________________________________________
> Distutils-SIG maillist  -  Distutils-SIG at python.org
> https://mail.python.org/mailman/listinfo/distutils-sig
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/distutils-sig/attachments/20150222/ceba00a9/attachment.html>