Tumbleweed gpg --verify: error: no public key?!?

JZL240I-U · 09-28-2016, 10:38 AM

I asked this question in the opensuse forums but got no reaction. So I try it here full of hope

:

I downloaded tumbleweed and its sha256sum-file. One then is instructed on the page to run "gpg --verify". On doing that (as root) I get

Code:

# gpg --verify openSUSE-Tumbleweed-DVD-x86_64-Current.iso.sha256
gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: Signature made Fri Sep 23 01:47:35 2016 CEST using RSA key ID 3DBDC284
gpg: Can't check signature: No public key

What is / am I missing? SUSE's public key for the sha256sum-file? Where do I get it and how do I add it to my key-ring if that is the Problem?

(There is also some minor hassle with the contents of the sha256sum-file but that one I could solve...).

JZL240I-U · 04-21-2017, 06:41 AM

I just noticed On their page

Quote:

The file must be signed by opensuse@opensuse.org with fingerprint 22C0 7BA5 3417 8CD0 2EFE 22AA B88B 2FD4 3DBD C284

Can I use this? How? Sorry, I have no experience with gpg-verifying.

<edit> Ahh, I just found this: https://tr.opensuse.org/SDB:Check_th...PM_or_ISO_file it is old but I will try it over the weekend. </edit>

JZL240I-U · 04-24-2017, 12:22 PM

Aww, darn.

Quote:

zypper se gpg-pubkey*
...
Reading repository data...
Reading installed packages...
No matching objects found.

*sigh*