miyagawa / cpanminus

cpanminus - get, unpack, build and install modules from CPAN
http://cpanmin.us
746 stars 213 forks source link

Misleading warning from --verify #679

Open openstrike opened 2 months ago

openstrike commented 2 months ago

I've spent a little time chasing at shadows today because the error message from --verify says

WARNING: Module::Signature and Digest::SHA is required for distribution verifications.

even when both of those modules are installed and usable but when cpansign is not (or as in my case is not in the current $PATH). I think these 2 necessary requirements for --verify should be tested for separately and the appropriate message delivered to the user instead.

If you agree, I'm happy to raise a PR - just tell me which branch to base it on, please.