On Tue, Nov 09, 2021 at 10:43:05PM +0100, Jakub Wilk wrote: > I saw this warning when trying to check a .dsc that didn't have a valid > signature: > > $ apt-get source -qqd nyancat > $ sed -i -e '/ PGP /d' nyancat_1.5.2-0.1.dsc > $ dscverify nyancat_1.5.2-0.1.dsc > nyancat_1.5.2-0.1.dsc: > dscverify: nyancat_1.5.2-0.1.dsc failed signature check: > gpg: WARNING: no command supplied. Trying to guess what you mean ... > gpg: no valid OpenPGP data found. > gpg: processing message failed: Unknown system error > Validation FAILED!! > > Please call gpg in a way that doesn't make it guess anything.
Interestingly, just adding --verify breaks it u.U
--- a/scripts/dscverify.pl
+++ b/scripts/dscverify.pl
@@ -130,7 +130,7 @@ sub check_signature($\@;\$) {
push @cmd, $havegpg, "--status-fd", $fd,
qw(--batch --no-options --no-default-keyring --always-trust);
foreach (@$rings) { push @cmd, '--keyring'; push @cmd, $_; }
-
+ push @cmd, '--verify';
my ($out, $err) = ('', '');
eval {
spawn(
mattia@warren ~/devel/debian/lib2geom %
~/devel/debian/devscripts/devscripts/scripts/dscverify.pl lib2geom_1.1-2.dsc
lib2geom_1.1-2.dsc:
Good signature found
dscverify.pl: no file spec lines in lib2geom_1.1-2.dsc
Validation FAILED!!
1 mattia@warren ~/devel/debian/lib2geom %
:(
--
regards,
Mattia Rizzolo
GPG Key: 66AE 2B4A FCCF 3F52 DA18 4D18 4B04 3FCD B944 4540 .''`.
More about me: https://mapreri.org : :' :
Launchpad user: https://launchpad.net/~mapreri `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia `-
signature.asc
Description: PGP signature
