use gpgv betterer

1 files changed, 7 insertions, 3 deletions

diff --git a/gpg-verify b/gpg-verify
index c572f61..358b1c9 100755
--- a/gpg-verify
+++ b/gpg-verify
@@ -12,20 +12,24 @@ nonce="$2"
 key="$3"
 sig="$4"
 
+cd /opt/autopeer
+NOTIFY_TO="$(python3 -c 'import config; print(config.NOTIFY_TO)')"
 echo "[autopeer $(hostname -f)] pgp: $username $key" | socat stdio "$NOTIFY_TO"
 
 keyring="$(mktemp)"
 curl -sL "$key" | gpg -o - --dearmor >"$keyring" || exit 7
-gpgv_out="$(gpgv --keyring "$keyring" <(echo "$sig" | sed 's/-----BEGIN PGP SIGNATURE-----/&\n\n/') <(echo "$nonce") 2>&1)"
-verified_key="$(echo "$gpgv_out" |& grep -oP 'gpgv:\s*using \S+ key \K.*')"
+gpgv_out="$(gpgv --status-fd 1 --keyring "$keyring" <(echo "$sig" | sed 's/-----BEGIN PGP SIGNATURE-----/&\n\n/') <(echo "$nonce"))"
+#[GNUPG:] VALIDSIG 1449565B711BABA3BC5347AE66B26E9D823D8647 2026-05-18 1779109475 0 4 0 22 10 00 1449565B711BABA3BC5347AE66B26E9D823D8647
 
 echo "keyring: $keyring"
 echo "$gpgv_out"
 
-if ! echo "$gpgv_out" | grep -qP 'gpgv: Good signature from'; then
+if ! echo "$gpgv_out" | grep -qP '^\[GNUPG:\] VALIDSIG '; then
 	exit 3
 fi
 
+verified_key="$(echo "$gpgv_out" | grep -P '^\[GNUPG:\] VALIDSIG ' | cut -d' ' -f3)"
+
 if [ -z "$verified_key" ]; then
 	exit 4
 fi