(handle_openpgp_signature): ...this and handle OpenPGP-signature
responses as documented.
(client_write_sigfile): Ditto on the response handling.
(responses): Rename OpenPGP-signatures to OpenPGP-signature.  Handle
new function name.
* rcs.c (iRCS_get_openpgp_signatures): New function factored from...
(RCS_get_openpgp_signatures): ...here.  Change API to return sigs
after base 64 decoding.
(RCS_has_openpgp_signatures): New function.
* rcs.h (RCS_get_openpgp_signatures): Update proto.
(RCS_has_openpgp_signatures): New proto.
* server.c (server_send_signatures): Handle raw signatures and match
response documentation.
(server_base_signatures): Use RCS_has_openpgp_signatures.
* verify.c (verify_fileproc): Handle raw signatures.
* vers_ts.c (Version_TS): Save RCSNode in input finfo.

* main.c (main): Process $CVS_VERIFY_CHECKOUTS & $CVS_SIGN_COMMITS.
* sanity.sh: Turn off GPG in remote mode eith base files disabled.

received from the server.
* verify.c (get_verify_checkouts_fatal): New function.
* verify.h (get_verify_checkouts_fatal): New proto.
* sanity.sh (client): Skip tests incompatible with OpenPGP signatures.
(openpgp2): New tests.

* sanity.sh (openpgp): Add a few tests for commit signature
verification.

(next_signature): ...this to avoid conflicts with sign.c.
* gpg.h: Ditto.
* cvs.h (trace): Move decl...
* server.h (trace): ...here.
* main.c (trace): Move global...
* server.c (trace): ...here.
(serve_signature): s/read_signature/next_signature/.
* sign.c (get_signature): Verify signature when configured to.
* verify.c (iget_verify_checkouts, get_verify_checkouts): Use global
server_support.
(verify_state_to_string): New function.
(iget_verify_commits): Allow tracing of state.
(iverify_signature): Handle sig in a buffer.
(verify_signature): New function.
(verify_fileproc): Use new iverify_signature API.
* verify.h (get_verify_checkouts): Update proto.
(get_verify_commits, verify_signature): New protos.

(openpgp_textmode, set_openpgp_textmode, get_openpgp_textmode): Move
global, functions from...
* sign.c (sign_textmode, set_sign_textmode, get_sign_textmode):
...here.
* gpg.h (set_openpgp_textmode, get_openpgp_textmode): New protos...
* sign.h (set_sign_textmode, get_sign_textmode): ...here.
* main.c (main): Rename `textmode' to `openpgp-textmode'.
(config): Move global to...
* parseinfo.c (config): ...here.
(parse_config): Handle Verify* keys.
* parseinfo.h: Use stricter include formatting.
(config): Declare extern.
* root.c (new_cvsroot_t, free_cvsroot_t, parse_cvsroot), root.h
(cvsroot_t): Rename sign_textmode as above.
* verify.c: Stop using "cvs.h".  Add protos for a few functions and
globals still in main.c.
(verify_commits): New static global.
(iget_verify_checkouts): Reformat slightly for readability.
(iget_verify_commits, get_verify_commits): New functions.
(get_verify_template, get_verify_args): Process config keys.
* verify.h (verify_state): Force VERIFY_DEFAULT to 0 so that no
initialization is necessary for structs initialized with xcalloc().

* repos.h: ...this new file.
* add.c, admin.c, checkout.c, client.c, commit.c, edit.c, fileattr.c,
history.c, logmsg.c, rcs.c, recurse.c, server.c, tag.c, update.c:
#include "repos.h".
* create_adm.c, repos.c: Ditto, and use stricter include formatting.

* repos.h: ...this new file.
* add.c, admin.c, checkout.c, client.c, commit.c, edit.c, fileattr.c,
history.c, logmsg.c, rcs.c, server.c, tag.c, update.c: #include
"repos.h".
* create_adm.c, repos.c: Ditto, and use stricter include formatting.

(main): Accept `--no-textmode'.
* root.c (new_cvsroot_t): Default sign/verify options to NULL.
(parse_cvsroot_t): Handle multiple textmode options and no-textmode.
* sign.c (get_sign_template): Return default when method option is
NULL.
(get_sign_textmode): Ditto, but return NULL when an option is set to
the empty string.
* verify.c (get_verify_template): Return default when method option is
NULL.
(iverify_signature): Use documented template format strings.

--verify and --verify-template configuration options.  Note
--textmode.

* client.c (client_base_signatures): Allow removal of signature files.
(handle_base_signature): Support new clear argument for
client_base_signatures.
(handle_base_clear_signature): New file.
(responses): Add Base-clear-signatures.
* gpg.c (parse_signature): Preserve raw signature.
* gpg.h (struct openpgp_signature): Add storage for raw signature.
* log.c (log_version): Display only low 32 bits of key IDs to users,
mimicing GnuPG.
* rcs.c: Use stricter include formatting.
(RCS_add_openpgp_signature): Use xalloc_die for memory errors.
(RCS_delete_openpgp_signatures): New function.
* rcs.h (RCS_delete_openpgp_signatures): Add proto.
* server.c (server_base_signatures): Send clear when there are no
signatures.
* sign.c (struct sign_args): Caller data for sign_fileproc.
(sign_fileproc, sign): Handle key deletion.
* verify.c (verify_fileproc): Match warning messages in local and
client/server mode.  Don't treat lack of signatures as an error.
* vers_ts.c (Version_TS), vers_ts.h (Version_TS): Make args const.

* sanity.sh (openpgp): Add signature deletion tests.

available.
(send_files): Accept FORCE_SIGNATURE flag.
* client.h: Define FORCE_SIGNATURE.
* sign.c (sign_check_fileproc): New function to verify files are
unmodified before wasting bandwidth.
(sign, sign_fileproc): Accept -d flag.

* cvs.h: ...here.  Some decls moved to...
* filesubr.h, vers_ts.h: ...here.
* add.c, checkin.c, checkout.c, classify.c, commit.c, diff.c,
ignore.c, import.c, log.c, ls.c, no_diff.c, recurse.c, remove.c,
server.c, status.c, subr.c, update.c, watch.c, wrapper.c: Use stricter
include formatting.

response when base support suppressed.
* rcs.c (RCS_get_openpgp_signatures): Support returning length for
convenience.  Fully parse archives when necessary.
(RCS_checkin): Don't sign dead revisions.
* rcs.h (RCS_get_openpgp_signatures): Add len to API.
* server.c (serve_wrapper_sendme_rcs_options): Remove extra semicolon.
(server_send_signatures): Use cached signature len.
(server_base_signatures): Check for option support before sending.
* subr.c (force_write_file): New function factored from...
(write_file): ...here.
* subr.h (force_write_file): New proto.
* verify.c (verify_fileproc): Handle local mode.
(verify_signature): Remove function.
* verify.h (verify_signature): Remove proto.

* sanity.sh: Support --no-bases.  s/--noredirect/--no-redirect/g, for
consistency.  Replace `test -z "$CVSNOBASES"' with boolean $bases.
(import): Don't expect signature on dead revision.
(openpgp): Skip without GPG and when bases are suppressed in remote
mode.

tested.

classify.c, client.c, client.h, commit.c, cvs.h, diff.c, edit.c,
edit.h, entries.c, fileattr.c, find_names.c, history.c, ignore.c,
import.c, lock.c, log.c, logmsg.c, ls.c, main.c, mkmodules.c,
modules.c, patch.c, rcs.c, recurse.c, release.c, remove.c, sanity.sh,
server.c, server.h, sign.c, status.c, tag.c, update.c, verify.c,
watch.c: Update copyright notices.

status.c: Use stricter include formatting.
(update_entries): Generalize sig_cache handling.
(client_write_sigfile): New function factored from...
(client_base_checkout): ...here.
(client_base_signatures, handle_base_signatures): New functions.
(responses): Add Base-signatures.
(struct send_data, send_files): Remove sign flag.
(send_fileproc): Compensate.  Send signatures for sign command.
* client.h [SEND_SIGNATURES]: Remove.
* commit.c (check_direntproc): Compensate.
* main.c (cmd): Add `sign' command.
* rcs.c (RCS_add_openpgp_signature): New function.
* server.c (server_write_sigfile): New function factored from...
(serve_modified): ...here.
(serve_unchanged): Write signatures.
(requests): Add `sign' request.
(serve_sign, server_base_signatures): New functions.
* server.h (server_write_sigfile): Add proto.
* sign.c (sign_fileproc, sign): New functions.
(sign_usage): Add.

* sanity.sh (verify): Rename to...
(openpgp): ...this and add sign test.

classify.c, diff.c, edit.c, edit.h, entries.c, fileattr.c,
find_names.c, history.c, ignore.c, import.c, lock.c, logmsg.c, ls.c,
modules.c, recurse.c, release.c, remove.c, tag.c, update.c, verify.c,
watch.c: Use stricter include formatting.
* cvs.h: Move decls to...
* classify.h, ignore.h, logmsg.h, recurse.h: ...these new files.

(verify_fileproc): Send signature to stdout with -p.
* sanity.sh (verify): Test `cvs verify -p'.

(update_entries): Save signatures to CVS/Base after a commit.
(send_signature): Cache signatures after sending them to the server.
Accept full file name as an argument.  Update all callers.
* sanity.sh: Set GPG trust for test key.
(verify): New test.
* subr.c (write_file), subr.h: New function.
* verify.c (iverify_signature): New function factored from...
(verify_signature): ...here.

* Makefile.am (cvs_SOURCES): Add new files.
* main.c: Include "verify.h".
(opt_usage): Add --verify* args.
(main): Process same.
* root.c (new_cvsroot_t): Default verify method options.
(parse_cvsroot): Process same.
* root.h (cvsroot_t): Add verify method options.
* sign.c (get_sign_textmode), sign.h (get_sign_textmode): Export.