[SOLVED] verify whonix with gpg

quincey543 · 07-27-2017, 11:17 PM

i have downloaded the whonix workstation - gateway- and both opengpg signatures and also the signing key.
i have placed them all in the same folder in my Downloads.
here is the output when following the instructions on the whonix page - it can't open patrick.asc which is the signing key.

bushtuckerman@bluemountains ~/Downloads $ gpg --fingerprint
/home/bushtuckerman/.gnupg/pubring.gpg
--------------------------------------
pub 4096R/A25BAE09 2016-06-07
Key fingerprint = 27DE B156 44C6 B3CF 3BD7 D291 300F 846B A25B AE09
uid Linux Mint ISO Signing Key <root@linuxmint.com>

pub 4096R/2EEACCDA 2014-01-16 [expires: 2021-04-17]
Key fingerprint = 916B 8D99 C38E AF5E 8ADC 7A2A 8D66 066A 2EEA CCDA
uid Patrick Schleizer <adrelanos@riseup.net>
sub 4096R/CE998547 2014-01-16 [expires: 2021-04-17]
sub 4096R/119B3FD6 2014-01-16 [expires: 2021-04-17]
sub 4096R/77BB3C48 2014-01-16 [expires: 2021-04-17]

bushtuckerman@bluemountains ~/Downloads $ chmod --recursive og-rwx ~/.gnupg
bushtuckerman@bluemountains ~/Downloads $ gpg --keyid-format long --with-fingerprint patrick.asc
gpg: can't open `patrick.asc'
bushtuckerman@bluemountains ~/Downloads $

what do i do to get it to open the patrick.asc file?

thank'ya

__________________________________________________________

i successfully verified following the whonix instructions with one change: i opened each of the workstation and gateway folders in the terminal (right click on the folder, then select 'open in terminal', then followed the commands from there.

aus9 · 07-28-2017, 07:47 PM

try this

Code:

gpg --verify patrick.asc filename

I am not sure as I can't see it listed but change filename to whatever the iso filename is whonix.iso?

quincey543 · 07-29-2017, 01:18 AM

Quote:

Originally Posted by aus9

try this

Code:

gpg --verify patrick.asc filename

I am not sure as I can't see it listed but change filename to whatever the iso filename is whonix.iso?

hello aus9, i tried it so here is the output:

bushtuckerman@bluemountains ~ $ gpg --verify patrick.asc filename
gpg: can't open `patrick.asc'
gpg: verify signatures failed: file open error
bushtuckerman@bluemountains ~ $

so far as i can see, this doesn't mean it's a bad signature, just that it can't open the file.
the file name is patrick.asc which is what the whonix page says it should be called.

aus9 · 07-29-2017, 07:11 PM

I thought you might get it but lets be blunter.

did you download a file called patrick.asc?

what is the name of the iso/package you downloaded?

if not sure show us output pls

Code:

ls Downloads

You must change FILENAME to whatever the iso or package is called.

got it?

quincey543 · 07-30-2017, 12:32 AM

Quote:

Originally Posted by aus9

I thought you might get it but lets be blunter.

did you download a file called patrick.asc?

what is the name of the iso/package you downloaded?

if not sure show us output pls

Code:

ls Downloads

You must change FILENAME to whatever the iso or package is called.

got it?

_________________________________________________

bushtuckerman@bluemountains ~ $ ls Downloads
antergos-17.7-x86_64.iso
antergos-17.7-x86_64.iso.sig
google-chrome-stable_current_amd64.deb
High Plains Drifter.mp4
IprediaOS-1-i686-Live-Desktop.iso
patrick.asc
Siberia, the Coldest and Wildest Place on Earth - Documentary 25 minutes.mp4
tor-browser_en-US
tor-browser-linux64-7.0.2_en-US.tar.xz
Watch Trailer Park Boys online - Vumoo TV (1).mp4
Whonix-Gateway
Whonix-Workstation
bushtuckerman@bluemountains ~ $

as you can see, the folders and the patrick.asc file is there.
no idea why it can't recognise them.

i successfully verified by opening each of the folders in the terminal. the verification commands worked from that point.
thanks for your replies aus9