These may also be helpful.

http://www.devops-blog.net/koji/gpg-signing-rpms-with-sigul-signing-server-koji-integration

https://andrewow.wordpress.com/2013/04/17/sigul-setting-up-a-sigul-client/

Cheers,

herlo

On Thu, Jan 15, 2015 at 8:02 PM, Peter Robinson <pbrobinson@gmail.com> wrote:
On Fri, Jan 16, 2015 at 2:30 AM, Mátyás Selmeci <matyas@cs.wisc.edu> wrote:
> I have imported several rpms into our koji without realizing that they were
> unsigned. I'd like to sign them with our gpg key, but I can't figure out how
> to do that after the fact. We use the signing plugin from
> https://fedorahosted.org/koji/ticket/203, but that only works for rpms we
> build ourselves.

In Fedora infra we run a signing server, sigul [1] that integrates
with koij for signing.

[1] https://fedorahosted.org/sigul/
--
buildsys mailing list
buildsys@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/buildsys