--output with --verify does not seem to create the signed data as documented in
the gpg man page (under --verify).
example:
sh -xc 'mkdir test_ver_out; cd test_ver_out ; echo test > test.txt ; gpg
--clearsign test.txt ; ls; gpg --output test.out --verify test.txt.asc; ls; [ -f
test.out ] && echo "YAY, it worked" || echo " error: no output"'
+ mkdir test_ver_out
+ cd test_ver_out
+ echo test
+ gpg --clearsign test.txt
+ ls
test.txt test.txt.asc
+ gpg --output test.out --verify test.txt.asc
gpg: Signature made Mon Jan 12 17:32:01 2015 MST using DSA key ID XXXXXXXX
gpg: Good signature from "Example <example@example.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
gpg: WARNING: not a detached signature; file 'test.txt' was NOT verified!
+ ls
test.txt test.txt.asc
+ [ -f test.out ]
+ echo ' error: no output'
- error: no output
Shouldn't there be a test.out with the same contents as test.txt?