wroclaw-git-backups/nix
1
0
Fork 0
mirror of https://github.com/NixOS/nix synced 2025-07-06 21:41:48 +02:00
Code Activity

* `nix-store --export --sign': sign the Nix archive using the RSA key

Browse source 
in /nix/etc/nix/signing-key.sec
This commit is contained in:
Eelco Dolstra 2007-02-21 14:31:42 +00:00
parent 6c9fdb17fb
commit 46e0919ced
8 changed files with 125 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

4
doc/signing.txt
View file

@ -1,6 +1,6 @@
Generate a private key:
$ openssl genrsa -out mykey.sec 2048
$ (umask 277 && openssl genrsa -out /nix/etc/nix/signing-key.sec 2048)
The private key should be kept secret (only readable to the Nix daemon
user).
@ -8,7 +8,7 @@ user).
Generate the corresponding public key:
$ openssl rsa -in mykey.sec -pubout > mykey.pub
$ openssl rsa -in /nix/etc/nix/signing-key.sec -pubout > /nix/etc/nix/signing-key.pub
The public key should be copied to all machines to which you want to
export store paths.