diff options
| author | Eelco Dolstra <e.dolstra@tudelft.nl> | 2007-02-21T14·31+0000 |
|---|---|---|
| committer | Eelco Dolstra <e.dolstra@tudelft.nl> | 2007-02-21T14·31+0000 |
| commit | 46e0919ced4646004cc0701b188d0a68e24e8924 (patch) | |
| tree | 3262f8068c38489029753c528a123b2c685aea68 /doc/signing.txt | |
| parent | 6c9fdb17fbda181fc09a9ce1f49662ef522d006b (diff) | |
* `nix-store --export --sign': sign the Nix archive using the RSA key
in /nix/etc/nix/signing-key.sec
Diffstat (limited to 'doc/signing.txt')
| -rw-r--r-- | doc/signing.txt | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/doc/signing.txt b/doc/signing.txt index fad14d743a8d..1d042e95e220 100644 --- a/doc/signing.txt +++ b/doc/signing.txt @@ -1,6 +1,6 @@ Generate a private key: -$ openssl genrsa -out mykey.sec 2048 +$ (umask 277 && openssl genrsa -out /nix/etc/nix/signing-key.sec 2048) The private key should be kept secret (only readable to the Nix daemon user). @@ -8,7 +8,7 @@ user). Generate the corresponding public key: -$ openssl rsa -in mykey.sec -pubout > mykey.pub +$ openssl rsa -in /nix/etc/nix/signing-key.sec -pubout > /nix/etc/nix/signing-key.pub The public key should be copied to all machines to which you want to export store paths. |