Jakub Jelen via devel wrote:
> As part of the Fedora 45 Change "Sequoia openpgpverify" [1], rawhide has a
> new macro, %openpgpverify, that verifies upstream source signatures with
> Sequoia's sqv instead of GnuPG's gpgv.

Is there a plan for what to do about the all-but-first-bad testcase, to
prevent the temporary inversion of the test from becoming permanent
through inaction?

The format should either be supported or rejected with an error.
Checking only the first signature and silently ignoring the others is
dangerous.

Björn Persson

Attachment: pgpnd6Za2LXQR.pgp
Description: OpenPGP digital signatur

-- 
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://forge.fedoraproject.org/infra/tickets/issues/new

Reply via email to