Am Samstag, 17. Dezember 2011, 15:22:28 schrieb Vladimir A. Pavlov: > 1. Is there a way to select a key to verify a file with?
1) Create a directory for each key, e.g. /tmp/gpg-aaaaaaaa 2) Import the key: gpg --homedir /tmp/gpg-aaaaaaaa --import aaaaaaaa.asc 3) Check the files: gpg --homedir /tmp/gpg-aaaaaaaa --trusted-key AAAAAAAAAAAAAAAA \ --verify file.sig The solution is to use different gpg calls for the two keys. I would like to add that you are doing something strange: Usually crypto is used to unambigiously connect data to a person. You are trying to do this the other way round: You are using whatever to find out whether the crypto information is correct. See the problem? If somebody is capable of faking your signatures why shouldn't he be able to fake anything else (which you take as a proof of origin) like sending an email from the other ones account? Hauke -- PGP: D44C 6A5B 71B0 427C CED3 025C BD7D 6D27 ECCB 5814
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ Gnupg-users mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnupg-users
