Bug#1088155: libgnupg-interface-perl: Testsuite errors against gnupg2 2.4.6

[Andreas Metzler]

On 2025-03-08 Andreas Metzler <ametzler at bebt.de> wrote:
> On 2024-11-24 Andreas Metzler <ametzler at bebt.de> wrote:
> > Source: libgnupg-interface-perl
> > Version: 1.04-4
> > Severity: normal
> > X-Debbugs-Cc: gnupg2 at packages.debian.org

> > libgnupg-interface-perl throws testsuite erors agains gpg 2.4.6-1:
[...]

> starting with 2.2.46-4 we are now also seeing a (single) testsuite error
> against 2.2.x:

> t/get_public_keys.t ........
> 1..3
> ok 1
> ok 2
> not ok 3
> Failed 1/3 subtests

This is strange. Taking test/public_keys.pgp from
libgnupg-interface-perl (attached for convenience) we find a difference
in gpg output:

(sid)ametzler at argenau:/var/tmp/LIB/libgnupg-interface-perl-1.04$ rm -rf /tmp/gpghome && install -d -m0700 /tmp/gpghome && gpg --homedir /tmp/gpghome/ --import test/public_keys.pgp
gpg: keybox '/tmp/gpghome/pubring.kbx' created
gpg: key 53AE596EF950DA9C: 2 signatures not checked due to missing keys
gpg: /tmp/gpghome/trustdb.gpg: trustdb created
gpg: key 53AE596EF950DA9C: public key "GnuPG test key (for testing purposes only)" imported
gpg: key 56FFD10A260C4FA3: 6 signatures not checked due to missing keys
gpg: key 56FFD10A260C4FA3: public key "Frank J. Tobin <ftobin at neverending.org>" imported
gpg: Total number processed: 2
gpg:               imported: 2
gpg: no ultimately trusted keys found
# 2.2.46-4
(sid)ametzler at argenau:/var/tmp/LIB/libgnupg-interface-perl-1.04$ gpg --homedir /tmp/gpghome/   --armor  --with-colons --fixed-list-mode  --with-fingerprint --with-key-data --check-sigs -- 0x93AFC4B1B0288A104996B44253AE596EF950DA9C | grep 6FFD10A260C4FA3:953180097
sig:!::17:56FFD10A260C4FA3:953180097::::Frank J. Tobin <ftobin at neverending.org>:10x:::::2:
# 2.2.46-3
(sid)ametzler at argenau:/var/tmp/LIB/libgnupg-interface-perl-1.04$ gpg --homedir /tmp/gpghome/   --armor  --with-colons --fixed-list-mode  --with-fingerprint --with-key-data --check-sigs -- 0x93AFC4B1B0288A104996B44253AE596EF950DA9C | grep 6FFD10A260C4FA3:953180097
sig:?::17:56FFD10A260C4FA3:953180097:::::10x:::::2:

Note "!" vs "?".

Or comparing the vanilla --check-sigs output we find that 2.2.46-3
warned about "missing keys", -4 sees "8 good signatures".
(sid)ametzler at argenau:/var/tmp/LIB/libgnupg-interface-perl-1.04$ gpg --homedir /tmp/gpghome/  --check-sigs -- 0x93AFC4B1B0288A104996B44253AE596EF950DA9C > /tmp/readable-3 2>&1
# same for gpg 2.2.46-4 ...
(sid)ametzler at argenau:/var/tmp/LIB/libgnupg-interface-perl-1.04$ diff /tmp/readable-?
5a6
> sig!         56FFD10A260C4FA3 2000-03-16  Frank J. Tobin <ftobin at neverending.org>
8a10
> sig!         56FFD10A260C4FA3 2000-03-16  Frank J. Tobin <ftobin at neverending.org>
13,14c15
< gpg: 6 good signatures
< gpg: 2 signatures not checked due to missing keys
---
> gpg: 8 good signatures

cu Andreas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: public_keys.pgp.gz
Type: application/gzip
Size: 2994 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20250309/65bf76e3/attachment.gz>