Verifying Signatures in a Script

[Dan T.]

--- Keith Hellman <khellman at mcprogramming.com> wrote:

> I would like a script to verify that I've signed a
document. 
> Verifying a signature is easy with gnupg, but I
can't find a switch
> that requires the signature be that of a particular
public key.
> 
> As it is, a document signed by someone else (whose
public key I
> have) would slip through my script if I just use the
exit code.  My
> best solution so far is to detect the identity
printed out by gpg
> on stderr --- but this seems a fragile solution.
> 
> I'd like to be able to say: $ gpg
--verify-specific-user
> khellman at mcprogramming.com --verify signedoc.gpg
> 
> Does this functionality exist? Did I miss something
in the docs? Is
> there a workaround?


Keith,

Look into the --status-fd output, I think the VALIDSIG
value is what you want.

I hope this help.

Dan




 
____________________________________________________________________________________
Looking for earth-friendly autos? 
Browse Top Cars by "Green Rating" at Yahoo! Autos' Green Center.
http://autos.yahoo.com/green_center/