Re: [PATCH v1] gpg-interface: Signatures by expired keys are fine

> Uwe Kleine-König <ukleinek@kernel.org> writes:
> 
> > If a signature is done with a valid key and that key later expires, the
> > signature should still be considered good.
> >
> > GnuPG exmits in this case something like:
> 
> "emits".
> 
> > diff --git a/gpg-interface.c b/gpg-interface.c
> > index 47222bf31b6e..6635c6c8e16f 100644
> > --- a/gpg-interface.c
> > +++ b/gpg-interface.c
> > @@ -382,7 +382,7 @@ static int verify_gpg_signed_buffer(struct signature_check *sigc,
> >  
> >  	delete_tempfile(&temp);
> >  
> > -	ret |= !strstr(gpg_stdout.buf, "\n[GNUPG:] GOODSIG ");
> > +	ret |= !strstr(gpg_stdout.buf, "\n[GNUPG:] GOODSIG ") && !strstr(gpg_stdout.buf, "\n[GNUPG:] EXPKEYSIG ");
> 
> Makes sense; I'll wrap this overlong line while queuing, though.