Control: severity -1 wishlist

Hi,

On Sun, 22 Jul 2018 at 18:00:27 +0800, Chris Hofstaedtler wrote:
> for this years DebConf KSP, I had to apply the attached patch to
> make gpgsigs understand the incoming text file format. I imagine
> this is due to a change in the output of current gpg.

gpgsigs never pretended to support the scripts used to compile the
DebConf KSP, so I'm lowering the severity to ‘wishlist’ :-P

> -     if ( m/^uid +(.*)$/ ) {
> +     if ( m/^uid\s+(\[[^\]]+\] )?+(.*)$/ ) {

This won't work with keys having a UID starting with a bracket-enclosed
value, for instance “[abc] def”. Using /^uid {11}.{10} (.*)$/ does seem
to work with 2.2.9, but looks rather brittle hence I'm reluctant to use
that.  IMHO the right fix is to use `--list-options no-show-uid-validity`
when compiling the list, I'll talk to Gunnar about that.  (UID validity
doesn't make sense in that context, because that's either the calculated
validity of the organizer, or “[unknown ]” if the dedicated GNUPGHOME
was used.)  That's what gpgparticipants(1) does, for what's it's worth.

Note that you can use `gpgsigs --refresh` to ignore the UID list found
in the input document, by the way.  (You'll need to download all keys,
but it's required to sign them anyway so it shouldn't be a burden.)

See you at DebConf, I guess :-)

Cheers,
-- 
Guilhem.

Attachment: signature.asc
Description: PGP signature

Reply via email to