Re: Questions on code signing

2019-08-27 Thread muredanta via Gnupg-users
Wow. Thanks very much for such a detailed reply. GPG can be counter-intuitive at times, but it seems there is always a way. Shalom! Sent with ProtonMail Secure Email. ‐‐‐ Original Message ‐‐‐ On Tuesday, August 27, 2019 6:30 PM, Werner Koch wrote: > On Tue, 27 Aug 2019 00:18, gnupg-us

Re: Questions on code signing

2019-08-27 Thread Werner Koch via Gnupg-users
On Tue, 27 Aug 2019 00:18, gnupg-users@gnupg.org said: > (1) If a file is signed but the signature is incorrect, 'gpg2 -d' > returns a non-zero status code, so the remote script knows not to Right but as stated somewhere in the docs, you should never ever rely on the status code fomr the binary.

Questions on code signing

2019-08-26 Thread muredanta via Gnupg-users
I've been working on a scheme for signing binary images that we ship out to various remote systems. The remote system expects the file to be both encrypted and signed, but there seem to be some corner cases: (1) If a file is signed but the signature is incorrect, 'gpg2 -d' returns a non-zero st