seahorse-tool does not indicate key-id when checking signatures

[joehill]

Binary package hint: seahorse

"seahorse-tool --verify" only checks .sig files and not .gpg files for signatures, then gives the email address and name of the signer, but not the key ID (which, it seems to me, is the point of verification).

When I attempt to check a .gpg file, I get the error "No valid signatures found". When I attempt to "decrypt" signed gpg files, seahorse-tool gives the error message "Couldn't decrypt file . . . No data" (although it quietly proceeds to unzip the file). Decrypting doesn't give any messages about who signed the file.

It should do the same as "gpg --verify": it should verify both .sig and .gpg files and give full results of verification, including the key ID. I'm not sure what the point of signing files is if you never see the ID of who signed it.

[Andreas Moog (ampelbein)]

In intrepid its not fixed. Still there is no indication which key-id was used to sign a file. I reported this issue Upstream, you can track the status and make comments here: http://bugzilla.gnome.org/show_bug.cgi?id=551012

[Andreas Moog (ampelbein)]

Fixed upstream:

Comment #4 from Stef Walter (seahorse-plugins developer, points: 20)
2009-03-03 03:02 UTC [reply]

Fixed in seahorse-plugins. seahorse_notify_signatures was sending key
identifiers with 32 characters. Identifiers need more work, like I posted on
the seahorse mailing list.

[Andreas Moog (ampelbein)]

Fixed in 2.26.0, available in Jaunty.