Skip to content
Snippets Groups Projects
Commit f7f88cc6 authored by Guillem Jover's avatar Guillem Jover
Browse files

Dpkg::OpenPGP: Require gpgv and do not fallback to gpg to verify signatures

Using gpgv exclusively for signature verification is better, it removes a
fat dependency where gpgv tends to be present when gpg is present, has a
better stateless interface, and reduces code complexity.
parent 7343b9d3
No related branches found
No related tags found
1 merge request!4Update crimson to version from bookworm
......@@ -169,8 +169,6 @@ sub verify_signature {
my @exec;
if (find_command('gpgv')) {
push @exec, 'gpgv', _gpg_options_weak_digests();
} elsif (find_command('gpg')) {
push @exec, 'gpg', _gpg_options_common(), '--verify';
} elsif ($opts->{require_valid_signature}) {
error(g_('cannot verify signature on %s since GnuPG is not installed'),
$sig);
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment