Hi all,

I have a file, with multiple ascii armoured PGP signatures in them, and I want 
to count the number of valid signatures found. To verify them I run "gpg2 
--verify sigs.asc", and the verify counts just one signature of the two that 
are present by giving up with the following warning:

gpg: WARNING: multiple signatures detected.  Only the first will be checked.

Oops.

Digging through archaeological layers of the internet we find this:

https://lists.gnupg.org/pipermail/gnupg-devel/2013-January/027284.html

Which summed up says concatenated signatures don't work unless they all have 
the same digest.

Assuming concatenating signatures is wrong, can anyone confirm what the correct 
way is to handle this?

Is there a way to combine the concatenated signature into one ascii armoured 
entity, something else?

Regards,
Graham
--

_______________________________________________
Gnupg-users mailing list
[email protected]
https://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to