#

# $ tar tf your-gem-1.0.gem

# metadata.gz

# metadata.gz.sig # metadata signature

# data.tar.gz

# data.tar.gz.sig # data signature

#

# === Manually signing gems

#

# -K, --private-key KEY Key for --sign or --build

# -s, --sign CERT Signs CERT with the key from -K

# and the certificate from -C

#

# We've already covered the <code>--build</code> option, and the

# <code>--add</code>, <code>--list</code>, and <code>--remove</code> commands

# 2. Grab the public key from the gemspec

#

# gem spec some_signed_gem-1.0.gem cert_chain | \

#

# 3. Generate a SHA1 hash of the data.tar.gz

#