Mailing List Archive

Can I verify signatures without writing files?
I'm finding that if DATA is a data file and SIG is a detached
signature, I cannot verify the signature without refering to one of
these as a file in the filesystem.

gpg --verify sig data # OK
cat sig | gpg --verify data # OK
cat sig | gpg --verify - data # OK
cat sig data | gpg --verify # Nope
cat sig data | gpg --verify - # Nope
cat sig data | gpg --verify - # Nope
cat sig data | gpg --verify - - # Nope

Thots?
Re: Can I verify signatures without writing files? [ In reply to ]
On Thu, Dec 10, 1998 at 04:40:51PM -0600, Richard Lynch wrote:
> Try:
>
> cat sig "\n" data | gpg --verify
>
> The point being to get a return as a separator.
> Or maybe you need ^Z in there?
> Or maybe you could do:
>
> echo sig | echo data | gpg --verify
>
> Somehow break the sig and data into discrete things.
>
> [.Just guessing based on my experience trying to get gpg to do this kina stuff.]

No dice. I suspect the problem is that it doesn't know where the data
to verify begins. The signature data is fine because it is
packetized.

Thanks though.