#1068850 GnuPG signature verify emits “SignatureVerifyError: 0”

Package:
dput
Source:
dput
Submitter:
Ben Finney
Date:
2024-04-12 07:54:04 UTC
Severity:
normal
#1068850#5
Date:
2024-04-12 07:41:06 UTC
From:
To:
When verifying a GnuPG-signed file, ‘dput’ can sometimes emit a confusing
error:

=====
[…]
Checking signature on .changes
gpg: ../build-area/foo_1.2_source.changes: Error checking signature from F9B46AAC84420C82: SignatureVerifyError: 0
Checking signature on .dsc
gpg: ../build-area/foo_1.2.dsc: Error checking signature from F9B46AAC84420C82: SignatureVerifyError: 0
[…]
=====

The program continues, but this message is misleading when the signature is
actually valid.

If there is no problem with the signature, no message like this should be
emitted; if there is a problem with the signature, the message should
clearly state what it is.