Ubuntu
apt package

  1. Bug #356012
  2. Comment #10

Comment 10 for bug 356012

Revision history for this message
Michael Vogt (mvo) wrote :

I looked at the code in gpg/gpgv at mainproc.c:check_sig_and_print() and GOODSIG is only set if its neither bad/expired/revoked:
...
 if(rc)
   statno=STATUS_BADSIG;
 else if(sig->flags.expired)
   statno=STATUS_EXPSIG;
 else if(is_expkey)
   statno=STATUS_EXPKEYSIG;
 else if(is_revkey)
   statno=STATUS_REVKEYSIG;
 else
   statno=STATUS_GOODSIG;
...

Validsig OTOH is returned ignoring the above statuses.