tools/sign_artifacts.sh

#!/usr/bin/env bash
#
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

set -e

echo "Sign the artifacts with PGP."

SCRIPTDIR="$(cd $(dirname "$0")/ && pwd)"
source "$SCRIPTDIR/load_config.sh" "$1"

if [ $# -eq 2 ]; then
  echo "Using key id $2 to sign release."
  PGP_SIGNING_KEY_ID="--default-key $2"
fi

# Sign all the artifacts with the PGP key.
export GPG_TTY=$(tty)
sysOS=`uname -s`
if [ $sysOS == "Darwin" ];then
    # Request to enter the passphrase to cache.
    `gpg -o /dev/null --sign /dev/null`
fi

cd $OPENWHISK_ARTIFACT_DIR
echo "Sign the artifacts with the private key."
for artifact in *.tar.gz *.zip *.tgz; do
    if [ "${artifact}" != "*.tar.gz" ] && [ "${artifact}" != "*.zip" ] && [ "${artifact}" != "*.tgz" ] ; then
        gpg --print-md SHA512 ${artifact} > ${artifact}.sha512
        gpg --yes --armor $PGP_SIGNING_KEY_ID --output ${artifact}.asc --detach-sig ${artifact}
    fi
done

ls