NAME

Module::Signature - Module signature file manipulation

VERSION

This document describes version 0.03 of Module::Signature.

SYNOPSIS

As a shell command:

    % cpansign          # create a signature
    % cpansign sign     # ditto, but overwrites without asking
    % cpansign verify   # verify a signature

In programs:

    use Module::Signature qw(sign verify SIGNATURE_OK);
    sign();
    sign(1);            # overwrites without asking

    # see the CONSTANTS section below
    (verify() == SIGNATURE_OK) or die "failed!";

DESCRIPTION

Module::Signature adds cryptographic authentications to CPAN distribution files, via the special SIGNATURE file.

CONSTANTS

These constants are not exported by default.

SIGNATURE_OK

Signature successfully verified.

SIGNATURE_MALFORMED

The signature file does not contains a valid OpenPGP message.

SIGNATURE_BAD

Invalid signature detected -- it might have been tampered.

SIGNATURE_MISMATCH

The signature is valid, but files in the distribution have changed since its creation.

MANIFEST_MISMATCH

There are extra files in the current directory not specified by the MANIFEST file.

SEE ALSO

ExtUtils::Manifest, Crypt::OpenPGP

AUTHORS

Autrijus Tang <autrijus@autrijus.org>

COPYRIGHT

Copyright 2002 by Autrijus Tang <autrijus@autrijus.org>.

This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

See http://www.perl.com/perl/misc/Artistic.html