Mailing List Archive

Unverifiable signatures of some downloads
I downloaded stuff from https://gnupg.org/download/index.html and
signatures from https://gnupg.org/signature_key.asc

Checking the signatures produced those two failures:

npth-1.6.tar.bz2
gpg: Signature made Mon Jul 16 00:37:23 2018 PDT
gpg: using RSA key
D8692123C4065DEA5E0F3AB5249B39D24F25E3B6
gpg: Can't check signature: No public key

gpa-0.10.0.tar.bz2
gpg: Signature made Tue Oct 16 14:46:51 2018 PDT
gpg: using RSA key
D8692123C4065DEA5E0F3AB5249B39D24F25E3B6
gpg: Can't check signature: No public key

Web search seems to indicate that those are old signatures by Werner
Koch.

Maybe the above downloads should be re-signed with the current signature
or perhaps the old one could be added to the public key block?

KK



_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Unverifiable signatures of some downloads [ In reply to ]
On Samstag, 3. September 2022 20:15:06 CEST Kris Kozminski wrote:
> I downloaded stuff from https://gnupg.org/download/index.html and
> signatures from https://gnupg.org/signature_key.asc

You can find a link to older keys at the end of
https://gnupg.org/signature_key.html

Regards,
Ingo