Re: Sign a summary with multiple GPG keys

[Colin Walters <walters verbum org>]

On Wed, Mar 7, 2018, at 7:28 PM, Ryan Rueth wrote:
> But, if I had done `gpg-import <key_id_2>` instead of <key_id_1>, then it
> will work.  Does anyone know how to sign a summary with multiple GPG keys?

Hmmm...it certainly seems this is intended to work, although we don't have much
test coverage of multiple key scenarios.

Stepping back a bit, what's your goal with multiple signatures?  Key rotation?
Having a "developer key" as well as a "distributor key"?  Something else?

I'll see if I can add a unit test for this.