NAME

Module::Signature - Module signature file manipulation

VERSION

This document describes version 0.06 of Module::Signature.

SYNOPSIS

As a shell command:

    % cpansign		# DWIM: verify an existing SIGNATURE, or
			        make a new one if none exists 

    % cpansign sign	# make signature; overwrites existing one
    % cpansign -s	# same thing

    % cpansign verify	# verify a signature
    % cpansign -v	# same thing

    % cpansign help     # display this documentation
    % cpansign -h       # same thing

In programs:

use Module::Signature qw(sign verify SIGNATURE_OK);
sign();
sign(overwrite => 1);	# overwrites without asking

# see the CONSTANTS section below
(verify() == SIGNATURE_OK) or die "failed!";

DESCRIPTION

Module::Signature adds cryptographic authentications to CPAN distribution files, via the special SIGNATURE file.

CONSTANTS

These constants are not exported by default.

SIGNATURE_OK

Signature successfully verified.

SIGNATURE_MALFORMED

The signature file does not contains a valid OpenPGP message.

SIGNATURE_BAD

Invalid signature detected -- it might have been tampered.

SIGNATURE_MISMATCH

The signature is valid, but files in the distribution have changed since its creation.

MANIFEST_MISMATCH

There are extra files in the current directory not specified by the MANIFEST file.

SEE ALSO

ExtUtils::Manifest, Crypt::OpenPGP

AUTHORS

Autrijus Tang <autrijus@autrijus.org>

COPYRIGHT

Copyright 2002 by Autrijus Tang <autrijus@autrijus.org>.

This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

See http://www.perl.com/perl/misc/Artistic.html