Skip to content

Detached signature verification example incorrect #345

@RazerM

Description

@RazerM

On the Basics page, under Verifying, there is the following example.

keybase verify foo.txt foo.txt.asc  # verify a file + detatched signature

If foo.txt.asc is the detached signature, then this is the wrong order and produces an error:

$ keybase sign foo.txt --detach-sign

$ keybase verify foo.txt foo.txt.asc
warn: gpg: packet(1) with unknown version 184
warn: gpg: no signature found
warn: gpg: the signature could not be verified.
warn: Please remember that the signature file (.sig or .asc)
warn: should be the first file given on the command line.

Using the signature file first works:

$ keybase verify foo.txt.asc foo.txt
info: Valid signature from you

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions