Bugs for Sorcery are reported here

[bugzilla-daemon AT bugs.sourcemage.org]

http://bugs.sourcemage.org/show_bug.cgi?id=9617

           Summary: GPG verification should notice signatures from expired
                    keys
           Product: Sorcery
           Version: Untargetted future release
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Cast
        AssignedTo: sm-sorcery-bugs AT lists.ibiblio.org
        ReportedBy: jblosser-smgl AT firinn.org


GPG verification of a signature that was made with a now-expired key will
succeed (exit 0) with only a warning about the expired key.  Sorcery needs to
either watch for this warning or check the key before verifying the 
signature. 
If the key is expired the signature check should either fail or ask the user
what to do (probably another candidate for bug 8579).

-- 
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.