Hi Bastian-- On Wed 2016-09-07 11:57:19 -0400, Daniel Kahn Gillmor wrote: > On Sun 2016-09-04 16:51:13 +0200, Bastian Blank wrote: >> The only way to verify an inline-signed message and also get the >> unescaped message is to use gpg --decrypt. --verify does not even >> accept --output. > > so if gpgv supported --output would that suit your needs?
fwiw, as of gpgv 2.1.15-3, gpgv now supports --output. It'll be in
upstream 2.1.16 when that is released, but i've cherry-picked the fix
and will maintain it in debian until 2.1.16 is released.
To be clear: the data sent to --output is the data that is (ostensibly)
signed. The signature itself may or may not be correct, so the return
code and --status-fd are still necessary for signature verification.
Please let me know if you have any trouble using this.
Regards,
--dkg
signature.asc
Description: PGP signature

