keys icon indicating copy to clipboard operation
keys copied to clipboard

Detached signatures created with the CLI cannot be verified in the GUI

Open grempe opened this issue 5 years ago • 2 comments

Binary or Armored detached signatures created with the CLI cannot be verified in the GUI. Only attached signatures work.

# GUI FAIL "failed to verify: failed to verify file: invalid data "
$ keys sign --signer grempe@github --in foo.txt --out foo-a-d -a -d

# GUI OK
$ keys sign --signer grempe@github --in foo.txt --out foo-a-t -a -t

# GUI FAIL "failed to verify: failed to verify file: invalid data "
$ keys sign --signer grempe@github --in foo.txt --out foo-b-d -b -d

# GUI OK
$ keys sign --signer grempe@github --in foo.txt --out foo-b-t -b -t

grempe avatar Jul 30 '20 23:07 grempe

Hmm, yeah it could detect if detached and check against a file name in the same directory (minus the .sig), or otherwise ask what file to check against. Or allow 2 files to be chosen at once.

Thanks for the bug report.

gabriel avatar Jul 31 '20 04:07 gabriel

I'd lean toward allowing selection of both files, but only if the source file (minus the .sig) isn't found in the same dir by an automated scan by the app.

The more you can do this lifting for the user automatically with some opinion the easier for the user.

grempe avatar Jul 31 '20 18:07 grempe