CRUX

Using signify with keys from the ~/.ssh/ directory, or having names other than the repository name, will generate a .signature file that must be edited, because the first line is something like:

untrusted comment: verify with /dir/other/than/etc/port/not-repo-name.pub

The attached patch makes it possible to sign ports with

signify -S -p /etc/ports/x.pub -s /home/user/.ssh/y.sec ..

This will allow the use of:

pkgmk -us -sk ... -pk ...

to sign ports with keys from other directories than /etc/ports or avoid editing the .signature files.