gpgverify and pgpverify

Russ Allbery rra at stanford.edu
Sun Dec 14 05:14:11 UTC 2008


Julien ÉLIE <julien at trigofacile.com> writes:

> Somebody recently wrote me that he did not manage to process some
> control articles
> It resulted in:
>     gpgv: WARNING: signature digest conflict in message
>
> After further investigation, I found out that he was using gpgverify
> and that the problem came from attached vs detached signatures
> (hmm... always the same problem -- which was fixed in pgpverify 1.23).
>
> Since pgpverify properly handles the use of gpgv and since it is
> more maintained (and documented) than gpgverify, I wonder why both
> of these programs still remain in INN distribution.
> Shouldn't gpgverify be dropped?
> Or is there something I am missing?

It should probably just be removed.  I created ticket #13 for this.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>

    Please send questions to the list rather than mailing me directly.
     <http://www.eyrie.org/~eagle/faqs/questions.html> explains why.



More information about the inn-workers mailing list