LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 05-05-2008, 03:52 AM   #1
brodo
Member
 
Registered: Jan 2004
Location: Poland, Poznan
Distribution: Slackware current 32 / 64
Posts: 406

Rep: Reputation: 30
BAD signature ?


Sorry to bother you but am I missing something or so ?

bash-3.1$ gpg --verify slackware-12.1-install-dvd.iso.asc slackware-12.1-install-dvd.iso.md5
gpg: Signature made Fri 02 May 2008 01:45:50 AM CEST using DSA key ID 40102233
gpg: BAD signature from "Slackware Linux Project <security@slackware.com>"
bash-3.1$ ls -l
total 3959054
drwxrwxrwx 2 aaaa users 296 2008-03-07 01:21 1
-rw-r--r-- 1 aaaa users 580306 2008-05-05 10:39 CHECKSUMS.md5
-rw-r--r-- 1 aaaa users 197 2008-05-05 10:39 CHECKSUMS.md5.asc
-rw-r--r-- 1 aaaa users 197 2008-05-05 10:24 slackware-12.1-install-dvd.iso.asc
-rw-r--r-- 1 aaaa users 4049520640 2008-05-04 13:40 slackware-12.1-install-dvd.iso.iso
-rw-r--r-- 1 aaaa users 65 2008-05-05 10:24 slackware-12.1-install-dvd.iso.md5
bash-3.1$
 
Old 05-05-2008, 04:29 AM   #2
Alien Bob
Slackware Contributor
 
Registered: Sep 2005
Location: Eindhoven, The Netherlands
Distribution: Slackware
Posts: 8,559

Rep: Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106Reputation: 8106
Just run
Code:
gpg --verify slackware-12.1-install-dvd.iso.asc
Eric
 
Old 05-05-2008, 04:46 AM   #3
brodo
Member
 
Registered: Jan 2004
Location: Poland, Poznan
Distribution: Slackware current 32 / 64
Posts: 406

Original Poster
Rep: Reputation: 30
Quote:
Originally Posted by Alien Bob View Post
Just run
Code:
gpg --verify slackware-12.1-install-dvd.iso.asc
Eric

Still sth wrong ....:-(..... :

bash-3.1$ gpg --verify slackware-12.1-install-dvd.iso.asc
gpg: no signed data
gpg: can't hash datafile: file open error
bash-3.1$

I've always used 2 arguments following the "gpg --verify" command : the *.asc fingerprint and the examined file.
The content of my directory is:

bash-3.1$ ls -l
total 3959054
drwxrwxrwx 2 aaaa users 296 2008-03-07 01:21 1
-rw-r--r-- 1 aaaa users 580306 2008-05-05 10:39 CHECKSUMS.md5
-rw-r--r-- 1 aaaa users 197 2008-05-05 10:39 CHECKSUMS.md5.asc
-rw-r--r-- 1 aaaa users 197 2008-05-05 10:24 slackware-12.1-install-dvd.iso.asc
-rw-r--r-- 1 aaaa users 4049520640 2008-05-04 13:40 slackware-12.1-install-dvd.iso.iso
-rw-r--r-- 1 aaaa users 65 2008-05-05 10:24 slackware-12.1-install-dvd.iso.md5
 
Old 05-05-2008, 05:57 AM   #4
Randux
Senior Member
 
Registered: Feb 2006
Location: Siberia
Distribution: Slackware & Slamd64. What else is there?
Posts: 1,705

Rep: Reputation: 55
mv slackware-12.1-install-dvd.iso.iso slackware-12.1-install-dvd.iso

and try it again

 
Old 05-05-2008, 06:34 AM   #5
Randux
Senior Member
 
Registered: Feb 2006
Location: Siberia
Distribution: Slackware & Slamd64. What else is there?
Posts: 1,705

Rep: Reputation: 55
Quote:
Originally Posted by brodo View Post
I've always used 2 arguments following the "gpg --verify" command : the *.asc fingerprint and the examined file.
That's not required if the files are named properly. The .asc file is not a fingerprint, it's a digital signature which is created by hashing the file and then encrypting it with your private key. That way, anybody who has your public key can compute the same hash, and then decrypt your hash with your public key and compare it to the hash they calculated on the file itself. They must match, and only the person who has your private key could have created a file you can decrypt with your public key.

Anyway you used:
Code:
gpg --verify slackware-12.1-install-dvd.iso.asc slackware-12.1-install-dvd.iso.md5
which could never work. The second file should have been slackware-12.1-install-dvd.iso.iso but you used .md5 which is just another checksum file.

See my answer in the post above; you should not have created *.iso.iso. If you rename the file as I posted with the mv command you can simply do

gpg --verify slackware-12.1-install-dvd.iso.asc

and all will be well.

Last edited by Randux; 05-05-2008 at 06:40 AM.
 
Old 05-05-2008, 08:02 AM   #6
brodo
Member
 
Registered: Jan 2004
Location: Poland, Poznan
Distribution: Slackware current 32 / 64
Posts: 406

Original Poster
Rep: Reputation: 30
My fault.
Of course the slackware*iso.asc file corresponds to the slackware*.iso cd image, not the slackware*iso.md5 file !
As I've always been only verifying CHECKSUMS.md5 against CHECKSUMS.md5.asc I mistakenly thought that slackware*iso.asc is for checking slackware*iso.md5 file..

Anyway thanks for the explanation; maybe the sunny spring time was involved in this little mess
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
RPM V3 DSA signature: BAD Scorps Linux - Software 0 11-15-2004 01:06 AM
bad signature problems.... jnassiri Mandriva 0 08-22-2004 12:16 AM
BAD Signature!! What to do? codedv Linux - General 3 07-11-2004 06:15 AM
gaim ----bad signature ????????????? varunk123456 Linux - Newbie 1 04-01-2004 04:02 PM
'bad signature' real-tech Linux - Software 1 03-27-2003 10:05 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 09:34 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration