Invalid firmware signature
dotpyfe
dotpyfe at airpost.net
Thu Jun 18 01:28:35 BST 2015
I've figured out what the problem was. According to this issue in python-gnupg[1], gnupg 2.1.3+ will produce the 'NEWSIG' status when verifying a signature. GnuPG 2.1.5 is the latest in the Arch repo so onerng_verify.py was barfing on the NEWSIG status and produced the verification error. With the latest python-gnupg from master, the issue goes away.
[1] https://bitbucket.org/vinay.sajip/python-gnupg/issue/35/status-newsig-missing-in-verify
More information about the Discuss
mailing list