openpgp: Distinguish bad signatures from those that are not alive.

  - Return a different `VerificationResult` for signatures that are
    not alive (BadSignature) from signatures that are actually
    bad (BadCheck).

1 files changed, 18 insertions, 0 deletions

diff --git a/tool/src/commands/mod.rs b/tool/src/commands/mod.rs
index c637da4a..21521e90 100644
--- a/tool/src/commands/mod.rs
+++ b/tool/src/commands/mod.rs
@@ -229,6 +229,7 @@ impl<'a> VHelper<'a> {
         for result in results {
             let (issuer, level) = match result {
                 GoodChecksum(ref sig, ..) => (sig.get_issuer(), sig.level()),
+                NotAlive(ref sig) => (sig.get_issuer(), sig.level()),
                 MissingKey(ref sig) => (sig.get_issuer(), sig.level()),
                 BadChecksum(ref sig) => (sig.get_issuer(), sig.level()),
             };
@@ -258,6 +259,23 @@ impl<'a> VHelper<'a> {
                         self.good_checksums += 1;
                     }
                 },
+                NotAlive(_) => {
+                    if let Some(issuer) = issuer {
+                        let issuer_str = format!("{}", issuer);
+                        eprintln!("Good, but not alive {} from {}", what,
+                                  self.labels.get(&issuer).unwrap_or(
+                                      &issuer_str));
+                    } else {
+                        eprintln!("Good, but not alive signature from {} \
+                                   without issuer information",
+                                  what);
+                    }
+                    if trusted {
+                        self.bad_signatures += 1;
+                    } else {
+                        self.bad_checksums += 1;
+                    }
+                },
                 MissingKey(_) => {
                     let issuer = issuer
                         .expect("missing key checksum has an issuer");