mirror of
https://github.com/f-droid/fdroidserver.git
synced 2025-09-13 22:42:29 +03:00
gpg-sign all valid files in the repo, including source tarballs
This makes sure there is a GPG signature on any file that is included in the repo, including APKs, OBB, source tarballs, media files, OTA update ZIPs, etc. Having a GPG signature is more important on non-APK files since they mostly do not have any signature mechanism of their own. This also adds basic tests of adding non-APK/OBB files to a repo with `fdroid update`. closes #232
This commit is contained in:
parent
84e09cd2a2
commit
56d51fcd6b
11 changed files with 35 additions and 11 deletions
|
@ -86,7 +86,7 @@ The repository of older versions of applications from the main demo repository.
|
|||
# current_version_name_source = 'id'
|
||||
|
||||
# Optionally, override home directory for gpg
|
||||
# gpghome = /home/fdroid/somewhere/else/.gnupg
|
||||
# gpghome = '/home/fdroid/somewhere/else/.gnupg'
|
||||
|
||||
# The ID of a GPG key for making detached signatures for apks. Optional.
|
||||
# gpgkey = '1DBA2E89'
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue