Signing is done by stsigtool only

build.go

@@ -27,19 +27,16 @@ import (
 	"strconv"
 	"strings"
 	"time"
-
-	"github.com/syncthing/syncthing/lib/signature"
 )
 
 var (
-	versionRe  = regexp.MustCompile(`-[0-9]{1,3}-g[0-9a-f]{5,10}`)
-	goarch     string
-	goos       string
-	noupgrade  bool
-	version    string
-	goVersion  float64
-	race       bool
-	signingKey string
+	versionRe = regexp.MustCompile(`-[0-9]{1,3}-g[0-9a-f]{5,10}`)
+	goarch    string
+	goos      string
+	noupgrade bool
+	version   string
+	goVersion float64
+	race      bool
 )
 
 const minGoVersion = 1.3
@@ -64,7 +61,6 @@ func main() {
 	flag.BoolVar(&noupgrade, "no-upgrade", noupgrade, "Disable upgrade functionality")
 	flag.StringVar(&version, "version", getVersion(), "Set compiled in version string")
 	flag.BoolVar(&race, "race", race, "Use race detector")
-	flag.StringVar(&signingKey, "sign", signingKey, "Private key file for signing binaries")
 	flag.Parse()
 
 	switch goarch {
@@ -229,15 +225,6 @@ func build(pkg string, tags []string) {
 	args = append(args, pkg)
 	setBuildEnv()
 	runPrint("go", args...)
-
-	if signingKey != "" {
-		// Create an signature of the binary, to be included in the archive for
-		// automatic upgrades.
-		err := signFile(signingKey, binary)
-		if err != nil {
-			log.Fatal(err)
-		}
-	}
 }
 
 func buildTar() {
@@ -723,34 +710,6 @@ func zipFile(out string, files []archiveFile) {
 	}
 }
 
-func signFile(keyname, file string) error {
-	privkey, err := ioutil.ReadFile(keyname)
-	if err != nil {
-		return err
-	}
-
-	fd, err := os.Open(file)
-	if err != nil {
-		return err
-	}
-	defer fd.Close()
-
-	sig, err := signature.Sign(privkey, fd)
-	if err != nil {
-		return err
-	}
-
-	out, err := os.Create(file + ".sig")
-	if err != nil {
-		return err
-	}
-	_, err = out.Write(sig)
-	if err != nil {
-		return err
-	}
-	return out.Close()
-}
-
 func vet(pkg string) {
 	bs, err := runError("go", "vet", pkg)
 	if err != nil && err.Error() == "exit status 3" || bytes.Contains(bs, []byte("no such tool \"vet\"")) {