[PATCH] gnupg: Add gpg status output to debug logging

* [PATCH] gnupg: Add gpg status output to debug logging
@ 2021-10-07 16:58 Kees Cook
  2021-10-07 18:10 ` Konstantin Ryabitsev
  0 siblings, 1 reply; 2+ messages in thread
From: Kees Cook @ 2021-10-07 16:58 UTC (permalink / raw)
  To: Konstantin Ryabitsev; +Cc: Kees Cook, tools

There wasn't an easy way to see how a failure was being determined by
GPG, so add the entire GPG status output to the debug log.

Signed-off-by: Kees Cook <keescook@chromium.org>
---
 patatt/__init__.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/patatt/__init__.py b/patatt/__init__.py
index 2e33bce209e2..6f4591973751 100644
--- a/patatt/__init__.py
+++ b/patatt/__init__.py
@@ -371,6 +371,7 @@ class DevsigHeader:
         signtime = ''
         signkey = ''
 
+        logger.debug('GNUPG status:\n\t%s' % ("\n\t".join(status.decode().strip().split('\n'))))
         gs_matches = re.search(rb'^\[GNUPG:] GOODSIG ([0-9A-F]+)\s+(.*)$', status, flags=re.M)
         if gs_matches:
             good = True
-- 
2.30.2


^ permalink raw reply related	[flat|nested] 2+ messages in thread