You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@whimsical.apache.org by ru...@apache.org on 2017/10/23 22:48:22 UTC
[whimsy] branch master updated: two more places where we should be
using gpg2
This is an automated email from the ASF dual-hosted git repository.
rubys pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/whimsy.git
The following commit(s) were added to refs/heads/master by this push:
new 5a6e90f two more places where we should be using gpg2
5a6e90f is described below
commit 5a6e90fe698a026ce6814559c6996b5d7b62f754
Author: Sam Ruby <ru...@intertwingly.net>
AuthorDate: Mon Oct 23 18:48:05 2017 -0400
two more places where we should be using gpg2
---
www/secretary/workbench/views/actions/check-signature.json.rb | 7 ++++---
1 file changed, 4 insertions(+), 3 deletions(-)
diff --git a/www/secretary/workbench/views/actions/check-signature.json.rb b/www/secretary/workbench/views/actions/check-signature.json.rb
index 52179ec..7e9597e 100644
--- a/www/secretary/workbench/views/actions/check-signature.json.rb
+++ b/www/secretary/workbench/views/actions/check-signature.json.rb
@@ -14,20 +14,21 @@ begin
# pick the latest gpg version
gpg = `which gpg2`.chomp
gpg = `which gpg`.chomp if gpg.empty?
+ gpg.untaint
# run gpg verify command
- out, err, rc = Open3.capture3 gpg.untaint, '--verify', signature.path,
+ out, err, rc = Open3.capture3 gpg, '--verify', signature.path,
attachment.path
# if key is not found, fetch and try again
if err.include? "gpg: Can't check signature: public key not found"
# extract and fetch key
keyid = err[/[RD]SA key ID (\w+)/,1].untaint
- out2, err2, rc2 = Open3.capture3 'gpg', '--keyserver', 'pgpkeys.mit.edu',
+ out2, err2, rc2 = Open3.capture3 gpg, '--keyserver', 'pgpkeys.mit.edu',
'--recv-keys', keyid
# run gpg verify command again
- out, err, rc = Open3.capture3 'gpg', '--verify', signature.path,
+ out, err, rc = Open3.capture3 gpg, '--verify', signature.path,
attachment.path
# if verify failed, concatenate fetch output
--
To stop receiving notification emails like this one, please contact
['"commits@whimsical.apache.org" <co...@whimsical.apache.org>'].