bin/sign: Read fingerprint from master rather than publish directory.

It's the authoritative source.

diff --git a/bin/sign b/bin/sign
index 29add64e67db95b926ff0bf70bf89c4cb4d440ac..dd60a9bbfc08388be9386ff3250696731115d28e 100755 (executable)
--- a/bin/sign
+++ b/bin/sign
@@ -64,7 +64,7 @@ while read line <&3; do
       publish.new/$host-$kt.pub
     mv publish.new/$host-$kt-cert.pub \
       publish.new/$host-$kt.cert
       publish.new/$host-$kt.pub
     mv publish.new/$host-$kt-cert.pub \
       publish.new/$host-$kt.cert

-    ssh-keygen -lv -fpublish.new/$host-$kt.pub | sed 's,^,| ,' >&4
+    ssh-keygen -lv -fhost/$host-$kt.pub | sed 's,^,| ,' >&4

   done
 done
 exec 3>&- 4>&-
   done
 done
 exec 3>&- 4>&-