[Distutils] Upload signature (and signing key) after package upload

Nick Coghlan ncoghlan at gmail.com
Mon Feb 23 00:55:27 CET 2015


On 23 Feb 2015 09:50, "Ben Finney" <ben+python at benfinney.id.au> wrote:
>
> Richard Jones <richard at python.org> writes:
>
> > Sorry, there's no facility at present for signing a file that's already
> > uploaded.
>
> Thanks. I can now stop futilely trying to find it :-)

Twine lets you at least separate signing from the build step, though:
https://pypi.python.org/pypi/twine

(Also, doesn't setup.py upload use HTTPS by default now? That part of the
twine docs may need qualification)

Cheers,
Nick.

>
> --
>  \      “It's up to the masses to distribute [music] however they want |
>   `\    … The laws don't matter at that point. People sharing music in |
> _o__)        their bedrooms is the new radio.” —Neil Young, 2008-05-06 |
> Ben Finney
>
> _______________________________________________
> Distutils-SIG maillist  -  Distutils-SIG at python.org
> https://mail.python.org/mailman/listinfo/distutils-sig
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/distutils-sig/attachments/20150223/ba76a7b8/attachment.html>


More information about the Distutils-SIG mailing list