From eb556dc73ae4eae11b53358407728b9895fff874 Mon Sep 17 00:00:00 2001 From: Fazle Arefin Date: Fri, 7 Nov 2025 22:35:06 +1100 Subject: [PATCH 1/2] gpgv: refresh page and add example --- pages/common/gpgv.md | 17 +++++++++++------ 1 file changed, 11 insertions(+), 6 deletions(-) diff --git a/pages/common/gpgv.md b/pages/common/gpgv.md index 3d66b5718742c2..069b4d74fe0a84 100644 --- a/pages/common/gpgv.md +++ b/pages/common/gpgv.md @@ -1,16 +1,21 @@ # gpgv > Verify OpenPGP signatures. +> See also: `gpg`. > More information: . -- Verify a signed file: +- Verify a clearsigned or inline-signed file (the signature is embedded in the file itself): -`gpgv {{path/to/file}}` +`gpgv {{path/to/file.asc}}` -- Verify a signed file using a detached signature: +- Verify a detached signature (`.asc` or `.sig`) against its corresponding data file: -`gpgv {{path/to/signature}} {{path/to/file}}` +`gpgv {{path/to/signature.asc}} {{path/to/data_file}}` -- Add a file to the list of keyrings (a single exported key also counts as a keyring): +- Verify a detached signature using a specific public keyring or exported public key file (`.gpg` or `.kbx`): -`gpgv --keyring {{./alice.keyring}} {{path/to/signature}} {{path/to/file}}` +`gpgv --keyring {{path/to/pubkey_or_keyring.gpg}} {{path/to/signature.asc}} {{path/to/data_file}}` + +- Verify a detached signature using a specific public key file in plain text format (`.txt`): + +`gpg --dearmor {{[-o|--output]}} {{path/to/pubkey.gpg}} < {{path/to/pubkey.txt}} && gpgv --keyring {{path/to/pubkey.gpg}} {{path/to/signature.asc}} {{path/to/data_file}}` From 4984ded0e8d32967c26fb260045dee2b271bfbba Mon Sep 17 00:00:00 2001 From: Fazle Arefin Date: Sat, 8 Nov 2025 00:35:55 +1100 Subject: [PATCH 2/2] gpgv: add note and simplify example command --- pages/common/gpgv.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/pages/common/gpgv.md b/pages/common/gpgv.md index 069b4d74fe0a84..b6fdcd4247f9c4 100644 --- a/pages/common/gpgv.md +++ b/pages/common/gpgv.md @@ -1,6 +1,7 @@ # gpgv > Verify OpenPGP signatures. +> Note: `gpgv` reads trusted pubkeys from `~/.gnupg/trustedkeys.kbx` in absence of the `--keyring` option. > See also: `gpg`. > More information: . @@ -18,4 +19,4 @@ - Verify a detached signature using a specific public key file in plain text format (`.txt`): -`gpg --dearmor {{[-o|--output]}} {{path/to/pubkey.gpg}} < {{path/to/pubkey.txt}} && gpgv --keyring {{path/to/pubkey.gpg}} {{path/to/signature.asc}} {{path/to/data_file}}` +`gpg --dearmor {{[-o|--output]}} {{path/to/pubkey.gpg}} {{path/to/pubkey.txt}} && gpgv --keyring {{path/to/pubkey.gpg}} {{path/to/signature.asc}} {{path/to/data_file}}`