Re: Bad signature on commit 6a34f4ccc8a5d (gnu: python-prompt-toolkit: Update to 1.0.9.)

[Leo Famulari]

On Wed, Dec 28, 2016 at 09:10:15PM -0500, Leo Famulari wrote:
> I see this in the log:
> 
> $ git log --show-signature 6a34f4ccc8a5d4a48e25ad3c9c512f8634928b91
> commit 6a34f4ccc8a5d4a48e25ad3c9c512f8634928b91
> gpg: Signature made Wed 28 Dec 2016 08:38:21 PM EST
> gpg:                using RSA key 91CCDB9B48541B99
> gpg: BAD signature from "Tobias Geerinckx-Rice <m...@tobias.gr>" [unknown]
> Author: Tobias Geerinckx-Rice <m...@tobias.gr>
> Date:   Wed Dec 28 23:01:49 2016 +0100
> 
>     gnu: python-prompt-toolkit: Update to 1.0.9.
>     
>     * gnu/packages/python.scm (python-prompt-toolkit): Update to 1.0.9.
> 
> Does anyone else get the same result? Any ideas?
> 
> Tobias, what version of GnuPG are you using?
> 
> I'm using:
> 
> gnupg 2.1.17  /gnu/store/1sa7k3x3y3chdl31p7y7x3sa7p9h1qa3-gnupg-2.1.17
> 
> ... which is built from Guix commit 791ac6a68d1e4bc80f4760cd968cb6c26dbab9ba.

I'm also unable to verify the signature of two more commits, as below.
I've attached a handy Git signature verifier script.

commit e0f8a520eda6b86a71f99eddf2c6968a95c8de0e
gpg: Signature made Thu 24 Nov 2016 08:21:51 PM EST
gpg:                using RSA key 91CCDB9B48541B99
gpg: BAD signature from "Tobias Geerinckx-Rice <m...@tobias.gr>" [unknown]
Author: Tobias Geerinckx-Rice <m...@tobias.gr>
Date:   Thu Nov 24 19:28:52 2016 +0100

    gnu: miniupnpc: Improve synopsis and description.
    
    * gnu/packages/upnp.scm (miniupnp)[synopsis, description]: Edit, fix typos,
    add some relevant (search) terms from the home page, and expand acronyms.

commit 7d162df8ce4dc90c681ff627b2ed94c192e6342f
gpg: Signature made Thu 15 Dec 2016 09:08:42 PM EST
gpg:                using RSA key 91CCDB9B48541B99
gpg: BAD signature from "Tobias Geerinckx-Rice <m...@tobias.gr>" [unknown]
Author: Tobias Geerinckx-Rice <m...@tobias.gr>
Date:   Thu Dec 15 23:17:52 2016 +0100

    gnu: mcelog: Update to 146.
    
    * gnu/packages/linux.scm (mcelog): Update to 146.

#!/bin/sh

# This script requires a Git revision selector, such as HEAD, 734713bc0,
# origin/master..HEAD, et cetera:
# https://git-scm.com/book/en/v2/Git-Tools-Revision-Selection

# A revision selector example for guix.git: v0.11.0..HEAD

if test $# -eq 1 ; then
        range=$1
else
        exit 1
fi

for commit in $(git rev-list $range); do
        results=$(git verify-commit $commit 2>&1)
        if test $? -ne 0; then
                git show --format=full --show-signature $commit
                # I'm not sure if the previous line will always include the
                # contents of $results, so I re-print it just in case.
                printf "%s\n\n" "$results"
        fi
done

signature.asc
Description: PGP signature