Dimitrie O. Paun wrote:
If it helps, here's a quick-n-dirty sample of how to check a signature:
gpg -q --batch --verify winetest-20040323-2314.zip.sig >/tmp/gpg 2>&1 || (echo "Bad signature, gpg reported:"; awk '{print " ",$0}' /tmp/gpg)
The problem is that this needs to execute on the client box, so we need the gpg installed there. I don't know how this is going to work out. It's up to Chris, but we can skip this sig validation for now.
AFAIK we could install gpg.exe at the same place as the test service with the NullSoft installer script. (GPG works the same on Windows as on Linux, just tested it.)
regards, Jakob