Bug#1042837: Acknowledgement (signify-openbsd: Embedding signature in gz header does not work)

2023-11-07 Thread Nikolaus Rath
On Sun, 5 Nov 2023, at 16:43, Tomasz Buchert wrote: > the "binary garbage" you see is actually the exact contents of the gz > file for which you verify. See: > > [ ~/test ] $ cat out.gz | signify-openbsd -Vz -p ~/.ssh/signify.pub | cat > x > [ ~/test ] $ diff x out.gz > > (i.e., out.gz and the

Bug#1042837: Acknowledgement (signify-openbsd: Embedding signature in gz header does not work)

2023-11-05 Thread Tomasz Buchert
On 05/11/23 14:46, Nikolaus Rath wrote: > Hi Thomas, > > On Sun, 5 Nov 2023, at 14:19, Tomasz Buchert wrote: > > On 01/08/23 17:15, Nikolaus Rath wrote: > >> Using -x instead of -m when verifying gives "interesting" output: > >> > >> $ signify-openbsd -Vz -p s3ql-5.0.pub -x signed.gz > >>

Bug#1042837: Acknowledgement (signify-openbsd: Embedding signature in gz header does not work)

2023-11-05 Thread Nikolaus Rath
Hi Thomas, On Sun, 5 Nov 2023, at 14:19, Tomasz Buchert wrote: > On 01/08/23 17:15, Nikolaus Rath wrote: >> Using -x instead of -m when verifying gives "interesting" output: >> >> $ signify-openbsd -Vz -p s3ql-5.0.pub -x signed.gz >> untrusted comment: verify with s3ql-5.0.pub >>

Bug#1042837: Acknowledgement (signify-openbsd: Embedding signature in gz header does not work)

2023-11-05 Thread Tomasz Buchert
On 01/08/23 17:15, Nikolaus Rath wrote: > Using -x instead of -m when verifying gives "interesting" output: > > $ signify-openbsd -Vz -p s3ql-5.0.pub -x signed.gz > untrusted comment: verify with s3ql-5.0.pub >

Bug#1042837: Acknowledgement (signify-openbsd: Embedding signature in gz header does not work)

2023-08-01 Thread Nikolaus Rath
Using -x instead of -m when verifying gives "interesting" output: $ signify-openbsd -Vz -p s3ql-5.0.pub -x signed.gz untrusted comment: verify with s3ql-5.0.pub RWSKPEtoJRYfrolP1xcoVCAxdIGvBp+I600+z5r4Ckcknx45J4pGrYvhlrWn6WTtwom7mTyjT7epM/oQyhfn/UbuKTR7pjN+0g0= date=2023-08-01T16:10:04Z