Re: New “guix refresh” command

[Ludovic Courtès]

Nikita Karetnikov <address@hidden> skribis:

>  (define (gnupg-receive-keys key-id server)
> -  (system* (%gpg-command) "--keyserver" server "--recv-keys" key-id))
> +  (system* (%gpg-command)
> +           "--keyserver" server
> +           "--search-keys" (string-append "0x" key-id)))

As the name suggests, this procedure is meant to download a key, not to
search for a key.

The interactive behavior you wanted you involve telling the user that a
key needs to be downloaded before calling ‘gnupg-receive-keys’.

That could be done by changing ‘gnupg-verify*’.  An optional argument
could be added to select between interactive behavior (“do you want to
download this key and add it to your keyring?”), always-download, and
never-download.

WDYT?

Ludo’.