Bad signatures issued on macOS

Werner Koch wk at gnupg.org
Wed Jan 28 15:22:34 CET 2026


Hi!

On Tue, 27 Jan 2026 15:33, John Soo said:

> Running the following script will often issue a bad signature after
> only a few rounds:

You may run into problems when mixing stdout and stderr (&>FILE).  Also
please do not use --debug-level guto or any other of those debug
levels; they are too noisy or don't print what you want.

Always use -v or --verbose and then selected debug flags.  In your case
I would suggest

  --debug hashing

which writes files with what was actually hashed for signature creation
and verification.  Compare them.



Shalom-Salam,

   Werner


-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openpgp-digital-signature.asc
Type: application/pgp-signature
Size: 284 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20260128/994888a5/attachment-0001.sig>


More information about the Gnupg-users mailing list