Signing plugin for hoe.
generate_key |
Generate a key for signing your gems. |
signing_key_file |
Signs your gems with this private key. |
signing_cert_file |
Signs your gem with this certificate. |
Run the ‘generate_key’ task. This will:
Configure your ~/.hoerc.
Generate a signing key and certificate.
Install the private key and public certificate files into ~/.gem.
Upload the certificate to RubyForge.
Hoe will now generate signed gems when the package task is run. If you have multiple machines you build gems on, be sure to install your key and certificate on each machine.
Keep your private key secret! Keep your private key safe!
To make sure your gems are signed run:
rake package; tar tf pkg/yourproject-1.2.3.gem
If your gem is signed you will see:
data.tar.gz data.tar.gz.sig metadata.gz metadata.gz.sig