Mailing List Archive

Re: GNU Privacy Assistant - false negatives on detached signature verification (GPA)
Am Mittwoch 06 Oktober 2021 21:19:18 schrieb anonymous via Gnupg-users:
> It seems that GPA can only verify detached signatures when it has a suffix
> of .sig .sign or .asc. When a detached signature has a different suffix
> (for example .gpg like all of the sha256sum.txt.gpg files for verifying
> Linux Mint downloads) GPA will always display a signature status of "Bad"
> even though the signature is in fact good.

If this is reproducable for you, please file a problem report on dev.gnupg.org
with keyword GPA.

Note that GPA maintance is currently very slow. Werner has some GKT3 patches
but no time to get this is shape. And unless someone steps up to maintain the
windows port, it will probably be dropped from Gpg4win for example. (See
gpg4win-devel@ discussion).

Best Regards,
Bernhard

--
www.intevation.de/~bernhard ? +49 541 33 508 3-3
Intevation GmbH, Osnabr?ck, DE; Amtsgericht Osnabr?ck, HRB 18998
Gesch?ftsf?hrer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner