SignatureRefusal
Why a signature established nobody — in words a person can act on, never as a softer «no». {@see SignatureVerifier::verify()} answers null for every refusal on purpose: an invalid signature and an unknown key mean the same thing to the gate. This names WHICH one it was, for the sentence only. It carries no signer and grants nothing; a caller that reads it has already been refused. It exists because one sentence covered them all. A receipt signed by a key that was simply not in the keyring the terminal read was reported as «altered, or the key expired or was revoked», and the person went looking for tampering instead of switching keyrings (greenhouse evidence/1071, B9).
SignatureRefusal::__construct()
public function __construct(string $reason, ?string $key = null, ?string $keyring = null):Parameters
| Name | Type | Description |
|---|---|---|
| $reason | string | one of the constants above |
| $key | (string | null) | the key gpg named — the full fingerprint when gpg printed one |
| $keyring | (string | null) | the keyring that was read, when the refusal is about it |
SignatureRefusal::sentence()
public function sentence(): stringWhat happened, as a clause that completes «its signature does not verify: …».
SignatureRefusal::remedy()
public function remedy(): stringWhat to do next — the one step that fits this refusal, not a list of possibilities.