Re^8: GPG-Signed modules fail to install using cpanp under CygwinPerl

Thanks for this! Its very good to have more signed modules to see what behaviors they display. I use both cygwin and debian so I can check what happens on both platforms.

I would like it if cpanm gave notice of a successful verification. I'm just today using cpanm since I perlbrew'ed an installation of a slightly old perl and cpanm comes with it.

Oct 14, 2024 at 21:23 UTC

The open palm of desire
Wants everything, it wants everything
It wants soil as soft as summer
And the strength to push like spring
Paul Simon -> Further to Fly

Comment on Re^8: GPG-Signed modules fail to install using cpanp under CygwinPerl

Replies are listed 'Best First'.
Re^9: GPG-Signed modules fail to install using cpanp under CygwinPerl by pryrt (Abbot) on Oct 15, 2024 at 13:01 UTC
I would like it if cpanm gave notice of a successful verification. It actually does, if `cpanm --verify` could find `cpansign.bat`, not just `cpansign` or `cpansign.exe` (I've reported this Win32 failure to App::cpanminus's repo). I patched my copy of `cpanm` to also search for the `.bat` ending when doing its `which('cpansign')` (and any other calls to `which` throughout), and now it does properly report a success: `c:\> cpansign --verify WWW::KeePassHttp --> Working on WWW::KeePassHttp Fetching http://www.cpan.org/authors/id/P/PE/PETERCJ/WWW-KeePassHttp-0 +.020.tar.gz ... OK Fetching http://www.cpan.org/authors/id/P/PE/PETERCJ/CHECKSUMS ... OK Verifying the SIGNATURE file ... Verified OK Configuring WWW-KeePassHttp-0.020 ... OK ...` [download] Since you are on linux or the linux-like Cygwin, I think `cpanm --verify` should work for you, as long as `cpansign` is in your `$PATH`.	[reply] [d/l] [select]

Replies are listed 'Best First'.

Re^9: GPG-Signed modules fail to install using cpanp under CygwinPerl
by pryrt (Abbot) on Oct 15, 2024 at 13:01 UTC

I would like it if cpanm gave notice of a successful verification.

It actually does, if cpanm --verify could find cpansign.bat, not just cpansign or cpansign.exe (I've reported this Win32 failure to App::cpanminus's repo). I patched my copy of cpanm to also search for the .bat ending when doing its which('cpansign') (and any other calls to which throughout), and now it does properly report a success:

c:\> cpansign --verify WWW::KeePassHttp
--> Working on WWW::KeePassHttp
Fetching http://www.cpan.org/authors/id/P/PE/PETERCJ/WWW-KeePassHttp-0
+.020.tar.gz ... OK
Fetching http://www.cpan.org/authors/id/P/PE/PETERCJ/CHECKSUMS ... OK
Verifying the SIGNATURE file ... Verified OK
Configuring WWW-KeePassHttp-0.020 ... OK
...
[download]

Since you are on linux or the linux-like Cygwin, I think cpanm --verify should work for you, as long as cpansign is in your $PATH.

[reply]
[d/l]
[select]