[pacman-dev] [PATCHv2 3/3] makepkg: Introduce validpgpkeys array

[Thomas Bächler]

Am 04.05.2014 08:50, schrieb Allan McRae:
> On 09/03/14 05:22, Thomas Bächler wrote:
>> diff --git a/scripts/makepkg.sh.in b/scripts/makepkg.sh.in
>> index d0e4fb5..d24a2cd 100644
>> --- a/scripts/makepkg.sh.in
>> +++ b/scripts/makepkg.sh.in
>> @@ -1283,6 +1283,13 @@ parse_gpg_statusfile() {
>>  					status="error"
>>  				fi
>>  				;;
>> +			VALIDSIG)
>> +				if [[ $arg10 ]]; then
>> +					fingerprint=$arg10
>> +				else
>> +					fingerprint=$arg1
>> +				fi
>> +				;;
> 
> And here goes $arg10...   But on every file I tested, $arg1 was always
> the fingerprint.  How can $arg10 be different?
> 
> Allan

    VALIDSIG  <fingerprint in hex> <sig_creation_date> <sig-timestamp>
              <expire-timestamp>  <sig-version> <reserved> <pubkey-algo>
              <hash-algo> <sig-class> [ <primary-key-fpr> ]

        The signature with the keyid is good. This is the same as
        GOODSIG but has the fingerprint as the argument. Both status
        lines are emitted for a good signature. [...]  PRIMARY-KEY-FPR
        is the fingerprint of the
        primary key or identical to the first argument.  This is
        useful to get back to the primary key without running gpg
        again for this purpose.

(doc/DETAILS from the gnupg source tarball)

I'll add a bit to the documentation and a comment.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 901 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.archlinux.org/pipermail/pacman-dev/attachments/20140504/32fc0fd0/attachment.asc>