I looked into g10/keyserver.c a bit and had hoped that import_keys_stream() there could be used to test if the fingerprints match the expected fingerprints, but it seems that the fpr/fpr_len arguments will only set to the fingerprint of the last key imported. So I need to check something else, maybe reading the spawn->fromchild stream into a tmp IOBUF, verify that and pass it on afterwards.
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1016643 Title: add-apt-repository downloads gpg key in an insecure fashion To manage notifications about this bug go to: https://bugs.launchpad.net/gnupg/+bug/1016643/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
