Hi Nikita,

Nikita Karetnikov <[email protected]> skribis:

> $ wget 
> https://www.kernel.org/pub/linux/utils/util-linux/v2.21/util-linux-2.21.2.tar.xz
> $ wget 
> https://www.kernel.org/pub/linux/utils/util-linux/v2.21/util-linux-2.21.2.tar.sign
> $ mv util-linux-2.21.2.tar.sign util-linux-2.21.2.tar.xz.sign
> $ gpg --search-keys EC39C284
> $ gpg --verify util-linux-2.21.2.tar.xz.sign
> [...]
> gpg: BAD signature from "Karel Zak <[email protected]>"
>
> Am I using the wrong signature?

You need to check against the .tar:

--8<---------------cut here---------------start------------->8---
$ xz -d < /nix/store/jc532vwqsnwbd611ary8ffw9q97cazlc-util-linux-2.21.2.tar.xz 
> util-linux-2.21.2.tar

$ gpg --verify util-linux-2.21.2.tar.sign 
gpg: Signature made Fri 25 May 2012 01:04:13 PM CEST using RSA key ID EC39C284
gpg: Good signature from "Karel Zak <[email protected]>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: B0C6 4D14 301C C6EF AEDF  60E4 E4B7 1D5E EC39 C284
--8<---------------cut here---------------end--------------->8---

Applied, thanks!

Ludo’.

Reply via email to