[PATCH] g10: --quiet should suppress notice about rejected third-party key signatures

[Robin H. Johnson]

On Wed, May 20, 2020 at 09:44:13AM +0200, ilf wrote:
> Thank you!
> 
> There is an issue for this, but it's closed as "wontfix": 
> https://dev.gnupg.org/T4893
> 
> Robin H. Johnson via Gnupg-devel:
> > Let --quiet hide the output about third-party key signatures:
> > gpg: Note: third-party key signatures using the SHA1 algorithm are rejected 
> > This does not change actual behavior, it just omits that note instead.
Can we please reopen this discussion about how to hide that message for
automation cases?

I'm specifically after hiding this message:
"gpg: Note: third-party key signatures using the SHA1 algorithm are rejected"

I have an automation use case where that message spams, and is already
using --quiet.

The alternative would be explicitly deleting some/many signatures before
that point, which strikes me as suboptimal.

I know there are OLD SHA1 signatures on some of the keys, they don't
matter to the workflow.

If you won't accept the patch to make --quiet ignore them, will you at
least consider a patch that suppressed specific messages?
e.g. --suppress-message=sha1-sig-3rd-party,md5-sig


> 
> -- 
> ilf
> 
> If you upload your address book to "the cloud", I don't want to be in it.
> 
> _______________________________________________
> Gnupg-devel mailing list
> Gnupg-devel at gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-devel
> 

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robbat2 at gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 1113 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-devel/attachments/20201108/aa45dd5f/attachment.sig>