Am 04.05.2014 08:50, schrieb Allan McRae:
> On 09/03/14 05:22, Thomas Bächler wrote:
>> diff --git a/scripts/makepkg.sh.in b/scripts/makepkg.sh.in
>> index d0e4fb5..d24a2cd 100644
>> --- a/scripts/makepkg.sh.in
>> +++ b/scripts/makepkg.sh.in
>> @@ -1283,6 +1283,13 @@ parse_gpg_statusfile() {
>> status="error"
>> fi
>> ;;
>> + VALIDSIG)
>> + if [[ $arg10 ]]; then
>> + fingerprint=$arg10
>> + else
>> + fingerprint=$arg1
>> + fi
>> + ;;
>
> And here goes $arg10... But on every file I tested, $arg1 was always
> the fingerprint. How can $arg10 be different?
>
> Allan
VALIDSIG <fingerprint in hex> <sig_creation_date> <sig-timestamp>
<expire-timestamp> <sig-version> <reserved> <pubkey-algo>
<hash-algo> <sig-class> [ <primary-key-fpr> ]
The signature with the keyid is good. This is the same as
GOODSIG but has the fingerprint as the argument. Both status
lines are emitted for a good signature. [...] PRIMARY-KEY-FPR
is the fingerprint of the
primary key or identical to the first argument. This is
useful to get back to the primary key without running gpg
again for this purpose.
(doc/DETAILS from the gnupg source tarball)
I'll add a bit to the documentation and a comment.
signature.asc
Description: OpenPGP digital signature
