Create signed packages automatically if desired. It is disabled by default,

and documented in mk/defaults/mk.conf. Both the "gpg" and "x509" methods
supported by pkg_admin(1) are supported. With package signing enabled, a
staging, unsigned copy of the package is always created, and its final copy
to the package repository is done with pkg_admin(1) instead of "ln || cp".
Proper operation should otherwise not be affected.

Tested both with and without user-destdir support in packages.

"can live with it" joerg@

From EdgeBSD.

1 files changed, 16 insertions, 1 deletions

diff --git a/mk/defaults/mk.conf b/mk/defaults/mk.conf
index 7af219ccd50..b225240fb7b 100644
--- a/mk/defaults/mk.conf
+++ b/mk/defaults/mk.conf
@@ -1,4 +1,4 @@
-# $NetBSD: mk.conf,v 1.238 2014/03/11 14:07:04 jperkin Exp $
+# $NetBSD: mk.conf,v 1.239 2014/04/06 15:04:16 khorben Exp $
 #
 
 # This file provides default values for variables that may be overridden
@@ -71,6 +71,21 @@ GZIP?=	-9
 # Possible: defined, not defined
 # Default: not defined
 
+#SIGN_PACKAGES=
+# sign the packages generated with the method specified.
+# Possible: gpg, x509, not defined
+# Default: not defined
+
+#X509_KEY=
+# key to use when signing packages with an X509 certificate.
+# Possible: pathname to the key file, not defined
+# Default: not defined
+
+#X509_CERTIFICATE=
+# certificate to use when signing packages with an X509 certificate.
+# Possible: pathname to the X509 certificate, not defined
+# Default: not defined
+
 .if defined(PKG_DEVELOPER) && ${PKG_DEVELOPER} != "no"
 PATCH_DEBUG?=
 .endif