Re: decryption outputs to stdout before verification
Werner Koch via Gnupg-users <[email protected]>
| Newsgroups | gmane.comp.encryption.gpg.user |
|---|---|
| Message-ID | <[email protected]> |
On Fri, 24 Oct 2025 15:03, Jakob Bohm said: > Note that the above user visible output (not the exit code) pretends > to report success, Which is tehcnically correct becuase the signature is valid. The assertion simply fails and thus the exit code is guaranteed to be failure and you will also see a ASSERT_SIGNER status line if the assertion is true. > --status-fd is a particularly horrible interface for shell scripting use, > as it requires setting up an additional temporary file and overly complex awk is the tool of choice ;-) I would suggest to use libgpgme, gpgme-tools, or gpgme-json for all applications. No need for --assert-signer in this case because this can be easily checked without. Salam-Shalom, Werner -- The pioneers of a warless world are the youth that refuse military service. - A. Einstein _______________________________________________ Gnupg-users mailing list [email protected] https://lists.gnupg.org/mailman/listinfo/gnupg-users
openpgp-digital-signature.asc
(application/pgp-signature, 284 B)
-----BEGIN PGP SIGNATURE----- iJ8EARYKAEcWIQSHd0YfKgdOvEgNNZQZzByeCFsQegUCaPuvGRsUgAAAAAAEAA5t YW51MiwyLjUrMS4xMSwyLDINHHdrQGdudXBnLm9yZwAKCRAZzByeCFsQekXVAP4x qAe28w8wSOrafNGnignAAFzGH9YunMx/ie0Es2CG9QEA0755BrTkXnHanPZHfxkF etCAOVNPrMld8SYYq3+lYA0= =UF9V -----END PGP SIGNATURE-----