about summary refs log tree commit diff
path: root/src/usr.bin/signify
diff options
context:
space:
mode:
Diffstat (limited to 'src/usr.bin/signify')
-rw-r--r--src/usr.bin/signify/signify.18
-rw-r--r--src/usr.bin/signify/signify.c29
2 files changed, 19 insertions, 18 deletions
diff --git a/src/usr.bin/signify/signify.1 b/src/usr.bin/signify/signify.1
index e973745..e538583 100644
--- a/src/usr.bin/signify/signify.1
+++ b/src/usr.bin/signify/signify.1
@@ -1,4 +1,4 @@
-.\" $OpenBSD: signify.1,v 1.55 2022/02/20 17:11:05 deraadt Exp $
+.\" $OpenBSD: signify.1,v 1.56 2022/07/20 15:12:39 deraadt Exp $
 .\"
 .\"Copyright (c) 2013 Marc Espie <espie@openbsd.org>
 .\"Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>
@@ -14,7 +14,7 @@
 .\"WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 .\"ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\"OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-.Dd $Mdocdate: February 20 2022 $
+.Dd $Mdocdate: July 20 2022 $
 .Dt SIGNIFY 1
 .Os
 .Sh NAME
@@ -171,12 +171,12 @@ Verify a release directory containing
 .Pa SHA256.sig
 and a full set of release files:
 .Bd -literal -offset indent -compact
-$ signify -C -p /etc/signify/openbsd-72-base.pub -x SHA256.sig
+$ signify -C -p /etc/signify/openbsd-73-base.pub -x SHA256.sig
 .Ed
 .Pp
 Verify a bsd.rd before an upgrade:
 .Bd -literal -offset indent -compact
-$ signify -C -p /etc/signify/openbsd-72-base.pub -x SHA256.sig bsd.rd
+$ signify -C -p /etc/signify/openbsd-73-base.pub -x SHA256.sig bsd.rd
 .Ed
 .Pp
 Sign a gzip archive:
diff --git a/src/usr.bin/signify/signify.c b/src/usr.bin/signify/signify.c
index 3a6d476..0178063 100644
--- a/src/usr.bin/signify/signify.c
+++ b/src/usr.bin/signify/signify.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: signify.c,v 1.135 2020/01/21 12:13:21 tb Exp $ */
+/* $OpenBSD: signify.c,v 1.136 2022/08/26 00:24:56 kn Exp $ */
 /*
  * Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>
  *
@@ -764,13 +764,14 @@ verifyzdata(uint8_t *zdata, unsigned long long zdatalen,
 int
 main(int argc, char **argv)
 {
-	const char *pubkeyfile = NULL, *seckeyfile = NULL, *msgfile = NULL,
-	    *sigfile = NULL;
+	const char *pubkeyfile = NULL, *msgfile = NULL, *sigfile = NULL;
 	char sigfilebuf[PATH_MAX];
-	const char *comment = "signify";
 	char *keytype = NULL;
-	int ch;
+#ifndef VERIFYONLY
+	const char *seckeyfile = NULL, *comment = "signify";
 	int none = 0;
+#endif
+	int ch;
 	int embedded = 0;
 	int quiet = 0;
 	int gzip = 0;
@@ -803,6 +804,15 @@ main(int argc, char **argv)
 				usage(NULL);
 			verb = SIGN;
 			break;
+		case 'c':
+			comment = optarg;
+			break;
+		case 'n':
+			none = 1;
+			break;
+		case 's':
+			seckeyfile = optarg;
+			break;
 		case 'z':
 			gzip = 1;
 			break;
@@ -812,27 +822,18 @@ main(int argc, char **argv)
 				usage(NULL);
 			verb = VERIFY;
 			break;
-		case 'c':
-			comment = optarg;
-			break;
 		case 'e':
 			embedded = 1;
 			break;
 		case 'm':
 			msgfile = optarg;
 			break;
-		case 'n':
-			none = 1;
-			break;
 		case 'p':
 			pubkeyfile = optarg;
 			break;
 		case 'q':
 			quiet = 1;
 			break;
-		case 's':
-			seckeyfile = optarg;
-			break;
 		case 't':
 			keytype = optarg;
 			break;