Hi!
On Sun, 2014-01-19 at 01:05:05 +0000, Ian Jackson wrote:
> Package: libdpkg-perl
> Version: 1.16.10
> Severity: wishlist
>
> Dpkg::Control::Hash has an allow_pgp parameter. It would be nice to
> be able to _accept_ a PGP-signed file but be able to tell after
> parsing that this happened.
>
> I would like this to be able to give a better error message when a
> user provides already-signed files to dgit
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731635
> Of course I could replicate the logic in Dpkg::Control::Hash but that
> seems pointless.
>
> (I have no need of the actual PGP signature information; I just want
> to know whether one appeared to be present. And callers that want to
> verify the file are going to have to go to a lot more trouble anyway
> so I think there's probably little point providing more detail than
> "was it present or not", unless it's easy to do so.)
Starting with version 1.17.0 the Dpkg::Control::Hash module records
that fact in the is_pgp_signed option. This is not documented, so you
might not want to rely on it, expecting to be an internal detail. But
I can make it part of the public interface by documenting it in the
next release, as it seems useful outside of Dpkg::Source::Package too.
The way to retrieve it, as of now is:
$ctrl->get_option('is_pgp_signed');
Would that be enough for your needs?
Thanks,
Guillem
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]