exceptionfactory commented on pull request #5457:
URL: https://github.com/apache/nifi/pull/5457#issuecomment-945872318


   Thanks for the feedback @gresockj! I pushed an update to address your 
recommendations.
   
   Regarding sending the detached signature through `VerifyContentPGP`, this is 
the result of attempting to processing the input as an OpenPGP message.  The 
behavior could be changed to avoid unwrapping OpenPGP messages when 
verification fails, but that would probably break other use cases if not 
implemented correctly.  The logic could be more granular to detect the presence 
of a Signature or One-Pass Signature packet, what do you think?
   
   I added property description documentation and an additional note in the 
Capability Description of `EncryptContentPGP` and `DecryptContentPGP`.
   
   I will take another look at verifying the detached signature using `gpg`.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to