Brian Inglis via Cygwin-apps writes: > Utility gpgv2 is the gpg2 release of gpgv, a lighter, script friendly, > single operation gpg verification helper designed for use in scripts > instead of gpg2 --verify: see 'info gpg2 helper gpgv'
NAK. This tool doesn't check for expired keys and also searches for keys in different places, so you'd have to change your setup. More specifically you'd either have to explicitly trust all keys you want to check (not going to happen) or use a "--keyring" argument to force it to use the pubring. (I've used an old key file for Cygwin in the following for demonstration, the current key is not expired obviously.) --8<---------------cut here---------------start------------->8--- ~> gpg2 --verify cygwin/setup64.zst{.sig,} gpg: Signature made So 07 Apr 2024 16:30:47 CEST gpg: using RSA key 56405CF6FCC81574682A5D561A698DE9E2E56300 gpg: Good signature from "Cygwin <cyg...@cygwin.com>" [expired] gpg: Note: This key has expired! Primary key fingerprint: 5640 5CF6 FCC8 1574 682A 5D56 1A69 8DE9 E2E5 6300 ~> gpgv2 cygwin/setup64.zst{.sig,} gpgv: unknown type of key resource 'trustedkeys.kbx' gpgv: keyblock resource '/home/gratz/.gnupg/trustedkeys.kbx': General error gpgv: Signature made So 07 Apr 2024 16:30:47 CEST gpgv: using RSA key 56405CF6FCC81574682A5D561A698DE9E2E56300 gpgv: Can't check signature: No public key ~> gpgv2 --keyring .gnupg/pubring.gpg cygwin/setup64.zst{.sig,} gpgv: Signature made So 07 Apr 2024 16:30:47 CEST gpgv: using RSA key 56405CF6FCC81574682A5D561A698DE9E2E56300 gpgv: Good signature from "Cygwin <cyg...@cygwin.com>" --8<---------------cut here---------------end--------------->8--- Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ SD adaptations for Waldorf Q V3.00R3 and Q+ V3.54R2: http://Synth.Stromeko.net/Downloads.html#WaldorfSDada