Difference between clearsign and detached signatures?

Ingo Klöcker kloecker at kde.org
Sun Aug 31 02:47:45 CEST 2014

On Saturday 30 August 2014 23:11:17 TJ wrote:
> On 30/08/14 22:20, Ingo Klöcker wrote:
> > BTW, which language do you want to write the code in?
> Well, I'm working in C to add another option to gpg, but the code that
> needs this is a Python library (that imports python-gnupg) that
> enables the regular verification of the GPG signatures of APT archive
> 'Release' files in all Debian/Ubuntu/related-distro mirrors
> world-wide.

I strongly suggest that you have a look at using some Python binding for 
gpgme instead of messing around with gpg. gpgme is _the_ library for 
using GnuPG in other programs.

The following message from last year lists two Python bindings:

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: </pipermail/attachments/20140831/bde2898b/attachment.sig>

More information about the Gnupg-users mailing list