Bug#612418: libmodule-signature-perl: does not detect failure of GPG

[David Bremner]

Package: libmodule-signature-perl
Version: 0.63-1
Severity: normal


I don't know whether this is specific to my setup with a smartcard,
but it seems the module fails to recognize the gpg failure. The
resulting SIGNATURE file has SHA1 signatures, but no GPG info.

output:

gpg: selecting openpgp failed: ec=6.112
gpg: signing failed: general error
gpg: [stdin]: clearsign failed: general error
gpg: no valid OpenPGP data found.
gpg: block_filter: 1st length byte missing
gpg: cleartext signature without data
gpg: no signature found
gpg: the signature could not be verified.
Please remember that the signature file (.sig or .asc)
should be the first file given on the command line.
==> SIGNATURE file created successfully. <==
Creating Convert-YText-0.1.tar.gz
Deleting Convert-YText-0.1


-- System Information:
Debian Release: 6.0
  APT prefers testing
  APT policy: (900, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libmodule-signature-perl depends on:
ii  libpar-dist-perl              0.45-1     perl module to create and manipula
ii  perl [libdigest-sha-perl]     5.10.1-17  Larry Wall's Practical Extraction 

Versions of packages libmodule-signature-perl recommends:
ii  gnupg                         1.4.10-4   GNU privacy guard - a free PGP rep

libmodule-signature-perl suggests no packages.

-- no debconf information