On Tue, Sep 07, 2021 at 05:22:03PM -0400, Derek Martin wrote: > On Tue, Sep 07, 2021 at 09:28:49PM +0200, Darshit Shah wrote: > > We are pleased to announce the release of GNU Wget 1.21.2 > [...] > > gpg --verify wget-1.21.2.tar.gz.sig > > > > If that command fails because you don't have the required public key, > > then run this command to import it: > > > > gpg --keyserver keys.gnupg.net --recv-keys 64FF90AAE8C70AF9 > > $ gpg --keyserver keys.gnupg.net --recv-keys 64FF90AAE8C70AF9 > gpg: keyserver receive failed: No name > > :(
Tried other key servers as well... $ gpg --keyserver keys.openpgp.org --recv-keys 64FF90AAE8C70AF9 gpg: key 2A1743EDA91A35B6: no user ID gpg: Total number processed: 1 $ gpg --list-key 64FF90AAE8C70AF9 gpg: error reading key: No public key Was able to get it from Ubunu's key server, however: $ gpg --keyserver keyserver.ubuntu.com --recv-keys 64FF90AAE8C70AF9 gpg: key 2A1743EDA91A35B6: 8 duplicate signatures removed gpg: key 2A1743EDA91A35B6: 104 signatures not checked due to missing keys gpg: key 2A1743EDA91A35B6: public key "Darshit Shah <[email protected]>" imported gpg: no ultimately trusted keys found gpg: Total number processed: 1 gpg: imported: 1 $ gpg --verify wget-1.21.2.tar.gz.sig wget-1.21.2.tar.gz gpg: Signature made Tue 07 Sep 2021 03:05:35 PM EDT gpg: using RSA key 6B98F637D879C5236E277C5C64FF90AAE8C70AF9 gpg: Good signature from "Darshit Shah <[email protected]>" [expired] gpg: aka "Darshit Shah <[email protected]>" [expired] gpg: Note: This key has expired! Primary key fingerprint: 7845 120B 07CB D8D6 ECE5 FF2B 2A17 43ED A91A 35B6 Subkey fingerprint: 6B98 F637 D879 C523 6E27 7C5C 64FF 90AA E8C7 0AF9 In particular, note: > gpg: Note: This key has expired! And: $ gpg --list-key 0x64FF90AAE8C70AF9 pub rsa4096 2015-10-14 [SC] [expired: 2020-08-16] 7845120B07CBD8D6ECE5FF2B2A1743EDA91A35B6 uid [ expired] Darshit Shah <[email protected]> uid [ expired] Darshit Shah <[email protected]> This key has been expired for over a year. Please take care of the maintenance of your GPG key and if appropriate re-sign the tarball. -- Derek Martin Senior System Software Engineer II Lead Akamai Technologies [email protected]
