Add SHA sum and GPG signature header templates

zbeekman · zbeekman · commit b2e42e80013f · 2017-11-11T18:29:53.000-05:00
diff --git a/cmake/opencoarrays-VER-SHA256.txt.asc.in b/cmake/opencoarrays-VER-SHA256.txt.asc.in
@@ -0,0 +1,13 @@
+-----BEGIN PGP SIGNATURE-----
+Comment: Mac users can use GPGTools - https://gpgtools.org
+Comment: Download Izaak Beekman's GPG public key from your
+Comment: trusted key server or from
+Comment: https://izaakbeekman.com/izaak.pubkey.txt
+Comment: Next add it to your GPG keyring, e.g.,
+Comment: `curl https://izaakbeekman.com/izaak.pubkey.txt | gpg --import`
+Comment: Make sure you have verified that the release archive's
+Comment: SHA256 checksum matches the provided
+Comment: opencoarrays-@full_git_describe@-SHA256.txt and ensure that this file
+Comment: and it's signature are in the same directory. Then
+Comment: verify with:
+Comment: `gpg --verify opencoarrays-@full_git_describe@-SHA256.txt.asc`
diff --git a/cmake/opencoarrays-VER-SHA256.txt.in b/cmake/opencoarrays-VER-SHA256.txt.in
@@ -0,0 +1,2 @@
+# To verify cryptographic checksums `shasum -c opencoarrays-@full_git_describe@-SHA256.txt` on Mac OS X, or
+# `sha256sum -c  opencoarrays-@full_git_describe@-SHA256.txt` on Linux.

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	+# To verify cryptographic checksums `shasum -c opencoarrays-@[email protected]` on Mac OS X, or
	`2`	+# `sha256sum -c opencoarrays-@[email protected]` on Linux.