Add a new example showing how to verify bsd.rd with signify and the new

sha256 -C option.

suggested by deraadt@
help/OK jmc@ tedu@

diff --git a/usr.bin/signify/signify.1 b/usr.bin/signify/signify.1
index 396a090..38ed1ff 100644 (file)
--- a/usr.bin/signify/signify.1
+++ b/usr.bin/signify/signify.1
@@ -1,4 +1,4 @@
-.\" $OpenBSD: signify.1,v 1.21 2014/01/14 17:49:24 jmc Exp $
+.\" $OpenBSD: signify.1,v 1.22 2014/01/17 03:38:12 lteo Exp $
 .\"
 .\"Copyright (c) 2013 Marc Espie <espie@openbsd.org>
 .\"Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>
@@ -14,7 +14,7 @@
 .\"WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 .\"ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\"OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-.Dd $Mdocdate: January 14 2014 $
+.Dd $Mdocdate: January 17 2014 $
 .Dt SIGNIFY 1
 .Os
 .Sh NAME
@@ -138,6 +138,12 @@ and a full set of release files:
 $ signify -V -e -p /etc/signify/55base.pub -x SHA256.sig -m - | \e
        sha256 -c -
 .Ed
+.Pp
+Verify a bsd.rd before an upgrade:
+.Bd -literal -offset indent -compact
+$ signify -V -e -p /etc/signify/55base.pub -x SHA256.sig -m - | \e
+       sha256 -C - bsd.rd
+.Ed
 .Sh SEE ALSO
 .Xr fw_update 1 ,
 .Xr pkg_add 1 ,