bin/sign: Read fingerprint from master rather than publish directory.

It's the authoritative source.

diff --git a/bin/sign b/bin/sign
index 29add64..dd60a9b 100755 (executable)
--- a/bin/sign
+++ b/bin/sign
@@ -64,7 +64,7 @@ while read line <&3; do
       publish.new/$host-$kt.pub
     mv publish.new/$host-$kt-cert.pub \
       publish.new/$host-$kt.cert
-    ssh-keygen -lv -fpublish.new/$host-$kt.pub | sed 's,^,| ,' >&4
+    ssh-keygen -lv -fhost/$host-$kt.pub | sed 's,^,| ,' >&4
   done
 done
 exec 3>&- 4>&-