Bug#908994: diffoscope: extract information from OpenPGP keys and signatures

Daniel Kahn Gillmor dkg at fifthhorseman.net
Tue Nov 27 08:11:46 GMT 2018


Please remember to supply --batch whenever you invoke gpg from a script
or other automated tooling!

On Mon 2018-09-17 16:06:40 +0800, Paul Wise wrote:
> For keys only:
>
> gpg --home $(mktemp -d) file

Please don't use this form, it's broken and unsupported by upstream.
There is no explicit command given, and gpg requires exactly one
command.

Until recently, there was no supported command, but with modern GnuPG
there is:

    gpg --batch --show-keys < file

for machine-parseable stuff or automated processing, you should also
probably supply --with-colons.

regards,

    --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-builds/attachments/20181127/72594d8a/attachment.sig>


More information about the Reproducible-builds mailing list