===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/signify/signify.1,v
retrieving revision 1.34
retrieving revision 1.35
diff -c -r1.34 -r1.35
*** src/usr.bin/signify/signify.1	2016/05/11 18:07:28	1.34
--- src/usr.bin/signify/signify.1	2016/09/02 17:27:31	1.35
***************
*** 1,4 ****
! .\" $OpenBSD: signify.1,v 1.34 2016/05/11 18:07:28 deraadt Exp $
  .\"
  .\"Copyright (c) 2013 Marc Espie <espie@openbsd.org>
  .\"Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>
--- 1,4 ----
! .\" $OpenBSD: signify.1,v 1.35 2016/09/02 17:27:31 espie Exp $
  .\"
  .\"Copyright (c) 2013 Marc Espie <espie@openbsd.org>
  .\"Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>
***************
*** 14,20 ****
  .\"WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  .\"ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  .\"OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
! .Dd $Mdocdate: May 11 2016 $
  .Dt SIGNIFY 1
  .Os
  .Sh NAME
--- 14,20 ----
  .\"WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  .\"ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  .\"OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
! .Dd $Mdocdate: September 2 2016 $
  .Dt SIGNIFY 1
  .Os
  .Sh NAME
***************
*** 35,49 ****
  .Fl s Ar seckey
  .Nm signify
  .Fl S
! .Op Fl e
  .Op Fl x Ar sigfile
  .Fl s Ar seckey
  .Fl m Ar message
  .Nm signify
  .Fl V
! .Op Fl eq
  .Op Fl x Ar sigfile
- .Fl p Ar pubkey
  .Fl m Ar message
  .Sh DESCRIPTION
  The
--- 35,50 ----
  .Fl s Ar seckey
  .Nm signify
  .Fl S
! .Op Fl ez
  .Op Fl x Ar sigfile
  .Fl s Ar seckey
  .Fl m Ar message
  .Nm signify
  .Fl V
! .Op Fl eqz
! .Op Fl p Ar pubkey
! .Op Fl t Ar keytype
  .Op Fl x Ar sigfile
  .Fl m Ar message
  .Sh DESCRIPTION
  The
***************
*** 104,113 ****
--- 105,125 ----
  and used by
  .Fl S
  to sign a message.
+ .It Fl t Ar keytype
+ When deducing the correct key to check a signature, make sure
+ the actual key matches
+ .Pa /etc/signify/<somekey>-keytype.pub .
  .It Fl x Ar sigfile
  The signature file to create or verify.
  The default is
  .Ar message Ns .sig .
+ .It Fl z
+ Sign and verify
+ .Xr gzip 1
+ archives, where the signing data
+ is embedded in the
+ .Xr gzip 1
+ header.
  .El
  .Pp
  The key and signature files created by
***************
*** 155,168 ****
  .Bd -literal -offset indent -compact
  $ signify -C -p /etc/signify/openbsd-61-base.pub -x SHA256.sig bsd.rd
  .Ed
  .Sh SEE ALSO
  .Xr fw_update 1 ,
  .Xr pkg_add 1 ,
! .Xr sha256 1
  .Sh HISTORY
  The
  .Nm
  command first appeared in
  .Ox 5.5 .
  .Sh AUTHORS
! .An Ted Unangst Aq Mt tedu@openbsd.org
--- 167,192 ----
  .Bd -literal -offset indent -compact
  $ signify -C -p /etc/signify/openbsd-61-base.pub -x SHA256.sig bsd.rd
  .Ed
+ .Pp
+ Sign a gzip archive:
+ .Bd -literal -offset indent -compact
+ $ signify -Sz -s key-arc.sec -m in.tgz -x out.tgz
+ .Ed
+ .Pp
+ Verify a gzip pipeline:
+ .Bd -literal -offset indent -compact
+ $ ftp url | signify -Vz -t arc|tar ztf -
+ .Ed
  .Sh SEE ALSO
  .Xr fw_update 1 ,
  .Xr pkg_add 1 ,
! .Xr sha256 1 ,
! .Xr gzip 1
  .Sh HISTORY
  The
  .Nm
  command first appeared in
  .Ox 5.5 .
  .Sh AUTHORS
! .An Ted Unangst Aq Mt tedu@openbsd.org ,
! .An Marc Espie Aq Mt espie@openbsd.org