SOPV-GPGV(1)

💅 SOPV-GPGV 💅

okay so bestie, welcome to the sopv-gpgv(1) manual page — a whole section-1 situation, generated with Python energy, and it's giving very useful, no cap. It's the Stateless OpenPGP Signature Verification tool that's backed by gpgv. Let's get into it 🫶

---

✨ NAME ✨

sopv-gpgv — Stateless OpenPGP Signature Verification backed by gpgv

✨ SYNOPSIS ✨

sopv-gpgv [-h] [--debug] SUBCOMMAND ...

✨ DESCRIPTION ✨

Verify OpenPGP signatures using gpgv. That's it, that's the whole main character moment 💖

✨ OPTIONS ✨

• --debug — Provide debugging information. (Yes, the tea. All of it. 🍵)

✨ EXACTLY ONE SUBCOMMAND MUST BE SELECTED ✨

Listen. You get to pick exactly one of these. Not two, not zero. One. Periodt. 👑

• sopv-gpgv version — emit version
• sopv-gpgv verify — verify detached signatures
• sopv-gpgv inline-verify — verify inline signatures

---

🌈 COMMAND 'sopv-gpgv version' 🌈

usage: sopv-gpgv version [-h] [--debug] [--backend | --extended |
--sop-spec |
                                --sopv]

Print version information to stdout. Like, the receipts of what this thing is. 📜

🎀 OPTIONS 'sopv-gpgv version' 🎀

• --debug — Provide debugging information
• --backend — Show gpgv version
• --extended — Show extended version information
• --sop-spec — Show last known version of SOP, the Stateless OpenPGP specification
• --sopv — Show compliant version of the sopv verification only subset of SOP

---

🦋 COMMAND 'sopv-gpgv verify' 🦋

usage: sopv-gpgv verify [-h] [--debug] [--not-before TIMESTAMP]
                        [--not-after TIMESTAMP]
                        SIGNATURES CERTS [CERTS ...]

Verify detached OpenPGP signatures. This is the "signature lives in its own file" era of verification ✨

• SIGNATURES — OpenPGP Signatures
• CERTS — Acceptable OpenPGP Certificates for Signature Verification

🎀 OPTIONS 'sopv-gpgv verify' 🎀

• --debug — Provide debugging information
• --not-before TIMESTAMP — Only accept signatures later than this (default: None)
• --not-after TIMESTAMP — Only accept signatures earlier than this (default: now)

---

🌸 COMMAND 'sopv-gpgv inline-verify' 🌸

usage: sopv-gpgv inline-verify [-h] [--debug] [--not-before TIMESTAMP]
                               [--not-after TIMESTAMP]
                               [--verifications-out VERIFICATIONS]
                               CERTS [CERTS ...]

Verify inline OpenPGP signatures — and yes, that means either CSF or "Signed Message" OpenPGP packets. Both. She contains multitudes 💜

• CERTS — Acceptable OpenPGP Certificates for Signature Verification

🎀 OPTIONS 'sopv-gpgv inline-verify' 🎀

• --debug — Provide debugging information
• --not-before TIMESTAMP — Only accept signatures later than this (default: None)
• --not-after TIMESTAMP — Only accept signatures earlier than this (default: now)
• --verifications-out VERIFICATIONS — Write SOP-style VERIFICATIONS here

---

🧚 COMMENTS 🧚

This tool implements sopv, the verification-only subset of:

https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/

It uses gpgv (from the GnuPG project) as its backend. Iconic collaboration, honestly. 🤝

The environment variable $SOPV_GPGV can be used to choose the name or path of the gpgv implementation used (defaults to "gpgv"). So if your gpgv is living somewhere unusual, just tell the env var and she'll find it 🫶

👑 AUTHOR 👑

Daniel Kahn Gillmor <dkg@fifthhorseman.net>

---

and that's the whole page, bestie!! 🎀✨

this was sopv-gpgv 0.1.4, dated 2025-03-18, a Generated Python Manual situation through and through. slay, stay stateless, and always verify your signatures 💖🦋💅