keys
keys copied to clipboard
Detached signatures created with the CLI cannot be verified in the GUI
Binary or Armored detached signatures created with the CLI cannot be verified in the GUI. Only attached signatures work.
# GUI FAIL "failed to verify: failed to verify file: invalid data "
$ keys sign --signer grempe@github --in foo.txt --out foo-a-d -a -d
# GUI OK
$ keys sign --signer grempe@github --in foo.txt --out foo-a-t -a -t
# GUI FAIL "failed to verify: failed to verify file: invalid data "
$ keys sign --signer grempe@github --in foo.txt --out foo-b-d -b -d
# GUI OK
$ keys sign --signer grempe@github --in foo.txt --out foo-b-t -b -t
Hmm, yeah it could detect if detached and check against a file name in the same directory (minus the .sig), or otherwise ask what file to check against. Or allow 2 files to be chosen at once.
Thanks for the bug report.
I'd lean toward allowing selection of both files, but only if the source file (minus the .sig) isn't found in the same dir by an automated scan by the app.
The more you can do this lifting for the user automatically with some opinion the easier for the user.