in cli/verify.go [111:128]
func verifyMfgSigsStr(m mfg.Mfg, man manifest.MfgManifest, keys []sec.PubSignKey) (string, bool) {
prefix := "signatures: "
if len(man.Signatures) == 0 {
return prefix + "n/a", true
}
if len(keys) == 0 {
return prefix + "not checked", true
}
idx, err := mfg.VerifySigs(man, keys)
if err != nil {
return prefix + fmt.Sprintf("BAD (%s)", err.Error()), false
}
return prefix + fmt.Sprintf("good (%s)", OptSignKeys[idx]), true
}