Invalid firmware signature

dotpyfe dotpyfe at airpost.net
Thu Jun 18 01:28:35 BST 2015


I've figured out what the problem was. According to this issue in python-gnupg[1], gnupg 2.1.3+ will produce the 'NEWSIG' status when verifying a signature. GnuPG 2.1.5 is the latest in the Arch repo so onerng_verify.py was barfing on the NEWSIG status and produced the verification error. With the latest python-gnupg from master, the issue goes away.

[1] https://bitbucket.org/vinay.sajip/python-gnupg/issue/35/status-newsig-missing-in-verify


More information about the Discuss mailing list