Incoming from ZsoL: > Hash: SHA1 > > On Tuesday 06 January 2004 06.37, s. keeling wrote: > > Incoming from Matt Zimmerman: > > > Debian Security Advisory DSA 411-1 > > > [EMAIL PROTECTED] http://www.debian.org/security/ > > > Matt Zimmerman January 5th, 2004 > > > http://www.debian.org/security/faq > > > > > > Package : mpg321 > > > > Were any of you able to verify the PGP signatures on the latest > > debian-security-announce messages? I can't: > > > > [-- PGP output follows (current time: Mon 05 Jan 2004 10:30:43 PM MST) > > 43E25D1E gpg: Can't check signature: public key not found > > [-- End of PGP output --] > > > maybe you have to import [EMAIL PROTECTED]'s public key.
I've tried. GPA import key fails quietly. So I used w3m to go to the URL he supplied: (2) keeling /home/keeling/dox_ gpg --verify matt_zimmerman.txt gpg: verify signatures failed: unexpected data (2) keeling /home/keeling/dox_ gpg --verify < matt_zimmerman.txt gpg: verify signatures failed: unexpected data So, I tried wget: (0) keeling /home/keeling/dox_ gpg --verify lookup\?op\=get\&search\=0x440202C3137B1CB4 gpg: verify signatures failed: unexpected data (2) keeling /home/keeling/dox_ gpg --verify < lookup\?op\=get\&search\=0x440202C3137B1CB4 gpg: verify signatures failed: unexpected data So, I "C"opied the mail to a file, then: (0) keeling /home/keeling/dox_ gpg --verify-files matt_zimmerman.msg gpg: Signature made Mon 05 Jan 2004 07:51:35 PM MST using DSA key ID 43E25D1E gpg: Can't check signature: public key not found Then I tried --import: (2) keeling /home/keeling/dox_ gpg --import matt_zimmerman.msg gpg: no valid OpenPGP data found. gpg: Total number processed: 0 Ah! Finally: (2) keeling /home/keeling/dox_ gpg --recv-keys 43E25D1E gpg: key 43E25D1E: removed multiple subkey binding gpg: key 43E25D1E: public key "Matt Zimmerman <[EMAIL PROTECTED]>" imported gpg: Total number processed: 1 gpg: imported: 1 Now why was that so difficult?!? Every other time just reading mail from someone grabs their key from the keyserver and checks the signature. -- Any technology distinguishable from magic is insufficiently advanced. (*) http://www.spots.ab.ca/~keeling - -