Re: Upgrade to Fedora-26 vs gpg download verification

2017-07-27 Thread Tim
Jonathan Ryshpan: > > gpg: WARNING: This key is not certified with a trusted signature! > > gpg: There is no indication that the signature belongs to the > > owner. > > Primary key fingerprint: E641 850B 77DF 4353 78D1 D7E2 812A 6B4B 64DA B85D Todd Zullinger: > The warning here is

Re: Upgrade to Fedora-26 vs gpg download verification

2017-07-27 Thread Jonathan Ryshpan
On Thu, 2017-07-27 at 14:41 -0400, Todd Zullinger wrote: > The warning here is telling you that gpg can't say with any certainty > that the key which made the good signature is a key you trust, because > the fedora key isn't signed by you or someone you have told gpg you > trust. > > This

Re: Upgrade to Fedora-26 vs gpg download verification

2017-07-27 Thread Todd Zullinger
Jonathan Ryshpan wrote: Upgrading from f25 to f26, I have just downloaded Fedora-KDE-Live-x86_64-26- 1.5.iso and am attempting to verify it according to the instructions on the download website ... ... I find the output, which follows, somewhat suspicious; but I don't know what to make of it.

Upgrade to Fedora-26 vs gpg download verification

2017-07-27 Thread Jonathan Ryshpan
Upgrading from f25 to f26, I have just downloaded Fedora-KDE-Live-x86_64-26- 1.5.iso and am attempting to verify it according to the instructions on the download website, which advise me to run: $ curl https://getfedora.org/static/fedora.gpg | gpg --import $ gpg --verify-files