always use --with-fingerprints

Otherwise we are assuming the user has set up their gpg.conf like
everyone else [bad assumption]
This commit is contained in:
Tim Dysinger 2016-05-05 10:36:08 -07:00
parent 63feb972ae
commit 11e1bf2f7d
No known key found for this signature in database
GPG key ID: 155E7413C156F68B

View file

@ -59,7 +59,8 @@ gpgVerify
:: (MonadIO m, MonadThrow m)
=> Signature -> Path Abs File -> m Fingerprint
gpgVerify (Signature signature) path = do
(hIn,hOut,hErr,process) <- gpg ["--verify", "-", toFilePath path]
(hIn,hOut,hErr,process) <-
gpg ["--verify", "--with-fingerprint", "-", toFilePath path]
(_in,out,err,code) <-
liftIO
((,,,) <$>