Hi!

While having a look at a missing feature in seahorse-nautilus [1], I did
not find a way to use GPGME to figure out if a signature was a clear
text signature or a detached signature.

The idea for seahorse-nautilus is to allow users to right click on a
`.asc` file and select “Verify signature…”. Ideally, if the file
contains a clear text signature, it would proceed to verify the
signature immediately. When having a detached signature, it would
eventually prompt the user about the location of the signed material.

Is there an easy way to give GPGME the file and know if it is a
clear text signature or a detached signature?


Another related question: in my tests, using the following always
failed:

    err = gpgme_op_verify(ctx, sig, NULL, NULL);

It seems that the `plain` 4th argument is mandatory when verifying
cleartext signature. I don't understand the rationale for that. In
seahorse-nautilus use case, we are only interested in the validity of
the signature.

Thanks for your help!

[1] https://bugzilla.gnome.org/show_bug.cgi?id=551042

-- 
Lunar                                .''`. 
lu...@debian.org                    : :Ⓐ  :  # apt-get install anarchism
                                    `. `'` 
                                      `-   

Attachment: signature.asc
Description: Digital signature

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to