I am working on visualizing webs of trust in javascript using openpgp.js to process and check keys downloaded from a keyserver. The downloading and parsing part works fine: I can extract user ids, key ids of signers, etc., but none of the signatures verify (verifyCertificationSignatures marks them 0). They should all be keys in my keychain which have been checked by native GPG.
The relevant function is here:
https://github.com/girving/trusty/blob/75c4bdc7422e362475ffa0ccccc81a0ec057e4aa/trusty.js#L101
Once all the keys have been downloaded, codes in that function is all 0 (before
the issuers are downloaded, the codes are correctly 2).
Is anyone obviously wrong in that function, or does anyone have suggestions for
how to diagnose the problem?
Thanks,
Geoffrey
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ http://openpgpjs.org

