gpgv

Verify OpenPGP signatures

gpgv [options] signed_files…

Check that signatures and the public keys used to make the signature are valid.

Assumes that all keys in the keyring are trustworthy, checks for expired or revoked keys.

--keyring file Add file to the list of keyrings.
Without a slash it is in the gpg home-directory ( default ~/.gnupg).

Default keyring names: trustedkeys.kbx (preferred) or trustedkeys.gpg

--output file
-o file		 to get the signed text from a cleartext or binary signature; existing file will be overwritten.
--status-fd unit Write status to file descriptor unit. See DETAILS
--logger-fd unit Write log output to file descriptor unit and not to stderr.
--log-file file Write log output to file. Use socket:// to log to socket.
--ignore-time-conflict Issue warnings if the signature seems to be older than the key due to clock problems
--homedir dirhome directory to dir. Must be given on the command line.
Default ~/.gnupg
Overrides $GNUPGHOMEM or on ms Windows systems by means of the Registry entry HKCU\Software\GNU\GnuPG:HomeDir.

Under MS Windows, create an empty file named `gpgconf.ctl' in the same directory as the tool `gpgconf.exe'. The root of the installation is then that directory; or, if `gpgconf.exe' has been installed directly below a directory named `bin', its parent directory. You also need to make sure that the following directories exist and are writable: `ROOT/home' for the GnuPG home and `ROOT/var/cache/gnupg' for internal cache files.

--weak-digest algo Treat algo algorithm as weak.
Signatures made over weak digests algorithms are rejected.
can be supplied multiple times.
Default MD5 is always considered weak
--enable-special-filenames Filenames of the form -&unit refers to the file descriptor unit
( where unit is a positive decimal number)
--verbose
-v 		more information during processing. If used twice, the input data is listed in detail.
--quiet -q quiet

0 everything is fine,
1 if at least one signature was bad, and
other error codes for fatal errors.

EXAMPLES

Verify the signature of the file: gpgv

For detached signatures, where sigfile is the detached signature (either ASCII-armored or binary) and
datafile contains the signed data;
if datafile is "-" the signed data is from stdin;
if datafile is not given the name of the file holding the signed data is constructed by cutting off the extension (".asc", ".sig" or ".sign") from sigfile. gpgv sigfile [datafile]

FILES

~/.gnupg/trustedkeys.gpg The default keyring with the allowed keys.

ENVIRONMENT

$HOME $GNUPGHOME instead of "~/.gnupg". SEE ALSO gpg(1)