I've created a shell wrapper than might be useful for this called
"gpgpv-multisig" which is a multi-call executable. Given /usr/bin/gpgv-
multisig

ln -s gpgv-multisig /usr/bin/gpgv-aptkeys

and called as 'gpgv-aptkeys' it will assume the keyring to be used is
/etc/apt/trusted.gpg (set by APT_KEYRING).

Returns the same exit codes as detailed in man gpgv(1):

0 = all signatures good
1 = at least one signature good
2 = no signatures good

Many configuration variables can be over-ridden from the environment but
adopt sensible defaults.


** Attachment added: "Shell script wrapping gpgv for multi-signature gpgv"
   
https://bugs.launchpad.net/ubuntu/+source/ubuntu-release-upgrader/+bug/1801762/+attachment/5209443/+files/gpgv-multisig

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1801762

Title:
  Dual-signed things should be easy to verify with one key

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1801762/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to