gnupg-1.2.1: public key not found

David Shaw dshaw@jabberwocky.com
Sun May 4 02:47:02 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, May 03, 2003 at 02:26:14PM -0700, Jurgen Botz wrote:
> Maybe I'm doing something stupid here... gnupg-1.2.1 as shipped with
> RedHat.  I just downloaded the new FreeS/WAN release and associated
> signatures and keys... I want to verify the signatures.  So I did
> 
> ~  $ gpg --import freeswan-allkeys
> 
> This seemed to work.  Then I did...
> 
> ~  $ gpgv freeswan-allkeys.sig
> ~  gpgv: Signature made Sat 22 Feb 2003 02:40:24 PM PST using RSA key ID
> 46EAFCE1
> ~  gpgv: Can't check signature: public key not found
> 
> Hmmm... but doing 'gpg --list-keys' shows that the relevant keys
> are in my keyring...

'gpg' and 'gpgv' use two different keyrings.  Importing a key into the
gpg keyring does not import it into the gpgv keyring.  See the gpgv
man page for the details.

> Strange.  Also...
> 
> ~  $ rpm -K freeswan-module-2.00_2.4.20_9-0.i386.rpm
> ~  freeswan-module-2.00_2.4.20_9-0.i386.rpm: sha1 (MD5) (PGP) md5 NOT OK
> (MISSING KEYS: PGP#5a7e4731)

rpm uses its own keyring as well.  Try "rpm --import".

David
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.3.2-cvs (GNU/Linux)
Comment: http://www.jabberwocky.com/david/keys.asc

iD8DBQE+tGMT4mZch0nhy8kRAqxwAJ0RzjxMexr8fWGWUfDnNx0IRbnRzwCghtVj
9GAyiTnRz2lYoIgJ3scVWD4=
=6rZA
-----END PGP SIGNATURE-----