LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices

Reply
 
Search this Thread
Old 06-01-2005, 04:47 AM   #1
verbose
Member
 
Registered: Aug 2004
Distribution: deb lenny 2.6.21-amd64
Posts: 320

Rep: Reputation: 31
gpg: public key not found


I'm trying to get gpg to compare a signature file with the respective file.

gpg --verify *.tar.gz.asc *.tar.gz

Output:
gpg: Signature made Sat 29 Jan 2005 07:12:53 PM EST using DSA key ID CD706369
gpg: Can't check signature: public key not found

I know I have to import a public key but I don't know where to obtain this file and I've found very little information describing what to do.

I'm sure there is a simple resolution to this dilemna.
Thanks
 
Click here to see the post LQ members have rated as the most helpful post in this thread.
Old 06-01-2005, 05:25 AM   #2
infinity42
Member
 
Registered: Apr 2005
Location: England
Distribution: Gentoo
Posts: 142

Rep: Reputation: 16
Where did you get the .tar.gz from? check their website for their public key, should be on there somewhere. Then you can import it into gpg. I don't remember how, as I started using the GPA front end (http://www.gnupg.org/(en)/related_so...gpa/index.html) - simple and gets the job done. You might want to try it.

Hope that helps
 
Old 06-01-2005, 03:51 PM   #3
verbose
Member
 
Registered: Aug 2004
Distribution: deb lenny 2.6.21-amd64
Posts: 320

Original Poster
Rep: Reputation: 31
I will have to look around the site... thanks.
"gpg --import *.asc" is how you import it into the public keyring.

I normally like to stick with non-GUI solutions. However, I've been looking at Seahorse a little bit, which is also a frontend to GPG. I haven't heard of GPA, as I've had very little experience with GPG at this point, but it looks nice.

I found the pubkey for dnspython and have imported it. It would have been staring me right in the face if I would have looked for it in the appropriate place.

Here's the output:
gpg: Signature made Sat 29 Jan 2005 07:12:53 PM EST using DSA key ID CD706369
gpg: Good signature from "Bob Halley <halley@dnspython.org>"
gpg: Note: This key has expired!
Primary key fingerprint: 3E0C 63DB 06DE BFD9 B2FE A75B 75E0 3544 CD70 6369


I'm assuming it worked then...

I'm assuming there must be some way to list all imported pubkeys without the use of a nice GUI like Seahorse. The manpage for gpg is enormous.
 
2 members found this post helpful.
Old 12-31-2009, 02:16 PM   #4
slackDope
LQ Newbie
 
Registered: Nov 2007
Location: Ontario, Canada
Distribution: Slack 13.1-64 bit
Posts: 12

Rep: Reputation: 0
Thanks for the gpg key import tip!
 
Old 12-31-2009, 03:00 PM   #5
sundialsvcs
Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 5,377

Rep: Reputation: 1108Reputation: 1108Reputation: 1108Reputation: 1108Reputation: 1108Reputation: 1108Reputation: 1108Reputation: 1108Reputation: 1108
Yes, indeed.

For those of you in the peanut gallery: systems like GPG use an encryption scheme in which there's a pair of keys. Anything encrypted with one can only be decrypted with the other and vice-versa.

A file is "signed" by generating some mathematical function result based on the document, then encrypting it using your private key. Anyone who has the corresponding public key can decrypt this result and compare it to their own result: if the two are the same, the signature is considered good.

GPG provides various "key servers" which are used to store public keys. The keys are filed by number. Key servers are used to store private keys only by idiots.
 
1 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
yum public gpg key?? Niflheim Fedora 1 03-28-2005 01:46 PM
YUM --import public.gpg.key Fredstar Linux - Newbie 8 03-25-2005 06:31 PM
Problem importing Mandrake Cooker public GPG key hazza Mandriva 2 07-26-2004 05:38 AM
GPG Data, Secret Key but no Public Key? Aeiri Linux - Software 5 07-20-2004 06:00 PM
issue importing RH GPG public key linux-singapore Linux - Software 7 12-18-2003 12:51 AM


All times are GMT -5. The time now is 07:48 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration