I am trying to perform gpg command call in golang using the exec package to create the command.

However, I would like to be able to pass the arguments as if I am using a process substitution such as this one: gpg --verify <(cat ./test.txt.sig) <(cat ./test.txt)

This command does work well, but it’s using the files name and I would like to be able to use the io.Reader interface instead to pass the content of the file (i.e. the result of the cat command).

So I tried to come up with the following solution:

VerifyStreamsWithContext(ctx context.Context, sr io.Reader, fr io.Reader) (<-chan bool, <-chan error) {
    okChan := make(chan bool, 1)
    errChan := make(chan error)
    cmd := exec.CommandContext(ctx, "gpg", "--verify", "-", "-")

    r := io.MultiReader(sr, fr)
    cmd.Stdin = r

    go func() {
        defer close(okChan)
        defer close(errChan)

        out, err := cmd.CombinedOutput()
        if err != nil {
            fmt.Println(string(out), err)
            errChan <- err
            return
        }

        if strings.Contains(string(out), ValidSignatureCheck) {
            okChan <- true
        } else {
            okChan <- false
        }
    }()

    return okChan, errChan
}

However it seems like there is a problem with the content of the second stream since I am getting an error:

gpg: Signature made jeu. 16 mai 2024 09:27:28 CEST
gpg:                using RSA key xxx
gpg: BAD signature from "x x <[email protected]>" [ultimate]
 exit status 1
panic: exit status 1

The doc specifies that it should be possible by using “-“:

–verify:
Assume that the first argument is a signed file and verify it without generating any output. With no arguments, the signature packet is read from STDIN. If only one argument is given, the specified file is expected to include a complete signature. With more than one argument, the first argument should specify a file with a detached signature and the remaining files should contain the signed data. To read the signed data from STDIN, use – as the second filename. For security reasons, a detached signature will not read the signed material from STDIN if not explicitly specified.