Skip to content

sq verify --cleartext/--message incorrectly accept inline/cleartext messages

Cacin on irc reports:

$ sq verify --signer-file=/usr/share/keyrings/debian-archive-keyring.pgp --cleartext -- /var/lib/apt/lists/deb.debian.org_debian_dists_trixie_InRelease >/dev/null

$ sq verify --signer-file=/usr/share/keyrings/debian-archive-keyring.pgp --message -- /var/lib/apt/lists/deb.debian.org_debian_dists_trixie_InRelease >/dev/null

both work (notice the --cleartext vs --message). Clearly only one should work.