<html><head><meta http-equiv="content-type" content="text/html; charset=us-ascii"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Hi all,<div><br></div><div>I have a file, with multiple ascii armoured PGP signatures in them, and I want to count the number of valid signatures found. To verify them I run "gpg2 --verify sigs.asc", and the verify counts just one signature of the two that are present by giving up with the following warning:</div><div><br></div><div>gpg: WARNING: multiple signatures detected. Only the first will be checked.</div><div><br></div><div>Oops.</div><div><br></div><div>Digging through archaeological layers of the internet we find this:</div><div><br></div><div><a href="https://lists.gnupg.org/pipermail/gnupg-devel/2013-January/027284.html">https://lists.gnupg.org/pipermail/gnupg-devel/2013-January/027284.html</a></div><div><br></div><div>Which summed up says concatenated signatures don't work unless they all have the same digest.</div><div><br></div><div>Assuming concatenating signatures is wrong, can anyone confirm what the correct way is to handle this?</div><div><br></div><div>Is there a way to combine the concatenated signature into one ascii armoured entity, something else?</div><div><br></div><div>Regards,</div><div>Graham</div><div>--</div><div><br></div></body></html>