Code

Only verify the first GPG signature#569

Code

Merged

phmccarty merged 7 commits intoclearlinux:masterclearlinux/autospec:masterfrom phmccarty:gpg-single-sigphmccarty/autospec:gpg-single-sigCopy head branch name to clipboardJan 21, 2020

+197-21

Commits

Commits on Jan 17, 2020

• Add new function for parsing GPG key and signature files

  Show description for 263a9f6
  phmccarty

  committed
  263a9f6

  Copy full SHA for 263a9f6

• pkg_integrity: only verify the first GPG signature

  Show description for 16b09eb
  phmccarty

  committed
  16b09eb

  Copy full SHA for 16b09eb

• tests: update pkg_integrity tests for recent changes

  Show description for b570428
  phmccarty

  committed
  b570428

  Copy full SHA for b570428

• pkg_integrity: only track parsed packets

  Show description for b35f6c2
  phmccarty

  committed
  b35f6c2

  Copy full SHA for b35f6c2

• pkg_integrity: skip first-sig extraction if packet length is unknown

  Show description for 8814315
  phmccarty

  committed
  8814315

  Copy full SHA for 8814315

Commits on Jan 18, 2020

• pkg_integrity: return GPGCliStatus instances when appropriate

  Show description for 8c4eef7
  phmccarty

  committed
  8c4eef7

  Copy full SHA for 8c4eef7

• tests: add new tests for the multiple-sig handling

  Show description for ce700c3
  phmccarty

  committed
  ce700c3

  Copy full SHA for ce700c3