<div dir="ltr"><div>These may also be helpful.<br><br><a href="http://www.devops-blog.net/koji/gpg-signing-rpms-with-sigul-signing-server-koji-integration">http://www.devops-blog.net/koji/gpg-signing-rpms-with-sigul-signing-server-koji-integration</a><br><br><a href="https://andrewow.wordpress.com/2013/04/17/sigul-setting-up-a-sigul-client/">https://andrewow.wordpress.com/2013/04/17/sigul-setting-up-a-sigul-client/</a><br><br></div>Cheers,<br><br>herlo<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jan 15, 2015 at 8:02 PM, Peter Robinson <span dir="ltr"><<a href="mailto:pbrobinson@gmail.com" target="_blank">pbrobinson@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5">On Fri, Jan 16, 2015 at 2:30 AM, Mátyás Selmeci <<a href="mailto:matyas@cs.wisc.edu">matyas@cs.wisc.edu</a>> wrote:<br>
> I have imported several rpms into our koji without realizing that they were<br>
> unsigned. I'd like to sign them with our gpg key, but I can't figure out how<br>
> to do that after the fact. We use the signing plugin from<br>
> <a href="https://fedorahosted.org/koji/ticket/203" target="_blank">https://fedorahosted.org/koji/ticket/203</a>, but that only works for rpms we<br>
> build ourselves.<br>
<br>
</div></div>In Fedora infra we run a signing server, sigul [1] that integrates<br>
with koij for signing.<br>
<br>
[1] <a href="https://fedorahosted.org/sigul/" target="_blank">https://fedorahosted.org/sigul/</a><br>
--<br>
buildsys mailing list<br>
<a href="mailto:buildsys@lists.fedoraproject.org">buildsys@lists.fedoraproject.org</a><br>
<a href="https://admin.fedoraproject.org/mailman/listinfo/buildsys" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/buildsys</a></blockquote></div><br></div>