Bugs for Sorcery are reported here

[bugzilla-daemon AT bugs.sourcemage.org]

http://bugs.sourcemage.org/show_bug.cgi?id=13669

           Summary: libgpg failing on not detached signatures
           Product: Sorcery
           Version: 1.13.x
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Cast
        AssignedTo: sm-sorcery-bugs AT lists.ibiblio.org
        ReportedBy: martin AT makl.de


>From gpg man:
       --verify
              Assume that the first argument is a signed file  or  a  detached
              signature  and  verify it without generating any output. With no
              arguments, the signature packet is read from stdin.  If  only  a
              sigfile  is  given, it may be a complete signature or a detached
              signature, in which case the signed stuff is expected in a  file
              without  the ".sig" or ".asc" extension.  With more than 1 argu-
              ment, the first should be a detached signature and the remaining
              files are the signed stuff. To read the signed stuff from stdin,
              use
               as the second filename.  For security reasons a detached signa-
              ture cannot read the signed material from stdin without denoting
              it in the above way.

as libgpg always passes two files to gpg, signatures that are not detached are
failing to verify.
>From what is stated in man i get the impression that calling gpg with only 
>the
signature file should work in any way.

-- 
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.