[Rpm-maint] [rpm-software-management/rpm] RPMTAG_OPENPGP returns legacy non-header signatures via "extension" code (Issue #4137)

[Panu Matilainen]

pmatilai left a comment (rpm-software-management/rpm#4137)

It seems like a fair point, actually. I had only considered the purpose "give me all signatures in the package", mainly for the purposes of 'rpm -q --info' view, but to use it for actual verification, you'd need to know what is what.

I don't know what the resolution is going to be, but based on your feedback we need
- a way to get all signatures (existing behavior)
- a way to get all header-only signatures

And then it seems that we should have a way to get all header+payload signatures too, even if only for consistency's / completeness sake.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/4137#issuecomment-4021738396
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/4137/4021738396 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20260309/c426bbaf/attachment.htm>