[pkg-gnupg-maint] Bug#940218: gpg: --textmode doesn't work in verify mode

Frank Heckenbach f.heckenbach at fh-soft.de
Sat Sep 14 02:11:15 BST 2019


Package: gpg
Version: 2.2.12-1
Severity: normal
Tags: upstream

I got a number of "invalid signatures" recently, and when I
investigated, I found that the "--textmode" option apparently has no
effect during verify operations, unlike what I expected, so I had to
manually convert the input to CR/LF to get successful verification.

Ideally, of course, I'd like "--textmode" to work in verify. If
that's not feasible, it should at least be made clear that it
doesn't in the documentation, including the man page. Currently it
just says:

  -t, --textmode

  Treat input files as text and store them in the OpenPGP canonical
  text form with  standard  "CRLF"  line endings. [...]

One might argue that "input files" implies that it's only for
signing, but the text is an input, too, during verify, and nothing
else states that it doesn't apply to verify. Making that clear would
at least have saved me some searching and experimenting.

Of course, it would have been better if the signatures were created
in text mode, but that's on the sender's side which I probably can't
influence easily.

(It's probably an upstream problem, but reporting a bug upstream
requires a login, and I don't feel like creating an account there
just for that. So please don't ask me to forward it upstream, but do
it yourself when necessary.)

-- System Information:
Debian Release: 10.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-debug'), (500, 'proposed-updates-debug'), (500, 'proposed-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.14.0-0.bpo.3-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=de_DE, LC_CTYPE=de_DE (charmap=ISO-8859-1), LANGUAGE=de_DE (charmap=ISO-8859-1)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages gpg depends on:
ii  gpgconf        2.2.12-1
ii  libassuan0     2.5.2-1
ii  libbz2-1.0     1.0.6-9.2~deb10u1
ii  libc6          2.28-10
ii  libgcrypt20    1.8.4-5
ii  libgpg-error0  1.35-1
ii  libreadline7   7.0-5
ii  libsqlite3-0   3.27.2-3
ii  zlib1g         1:1.2.11.dfsg-1

Versions of packages gpg recommends:
ii  gnupg  2.2.12-1

gpg suggests no packages.

-- debconf-show failed



More information about the pkg-gnupg-maint mailing list