Theo Buehler wrote: > Two small things for signify -C: > > Contrary to what usage suggests, the -p pubkey argument for signify -C > is optional in that signify will use the key specified in the untrusted > comment. In -V mode, the key can be tied down a little by specifying -t. > > Right now, the -t keytype argument is silently ignored in -C mode: > > $ ftp > https://cdn.openbsd.org/pub/OpenBSD/6.6/amd64/{INSTALL.amd64,SHA256.sig} > >/dev/null > $ signify -C -t pkg -x SHA256.sig INSTALL.amd64 > Signature Verified > INSTALL.amd64: OK > > Diff below fixes usage and makes the above command error out with:
yes, that's an oversight. this looks good.
