Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

No Public Key on Signature file #32

Open
theunpleasantowl opened this issue Feb 11, 2023 · 0 comments
Open

No Public Key on Signature file #32

theunpleasantowl opened this issue Feb 11, 2023 · 0 comments

Comments

@theunpleasantowl
Copy link

The release file ProjectCenter-0.7.0.tar.gz.sig doesn't appear to be signed correctly and causes issues with AUR build process.

Here is the output of gpg --verify:

gpg --verify ProjectCenter-0.7.0.tar.gz.sig 
gpg: assuming signed data in 'ProjectCenter-0.7.0.tar.gz'
gpg: Signature made Fri 03 Feb 2023 06:00:33 AM EST
gpg:                using DSA key BA075B9FA4C0EA04C96F9FD25023D366016912D0
gpg: Can't check signature: No public key

compare to gnustep-gui's signature which is correctly signed:

$ gpg --verify gnustep-gui-0.30.0.tar.gz.sig 
gpg: assuming signed data in 'gnustep-gui-0.30.0.tar.gz'
gpg: Signature made Thu Dec 29 04:10:15 2022 EST
gpg:                using DSA key 83AAE47CE829A4146EF83420CA868D4C99149679
gpg:                issuer "[email protected]"
gpg: Good signature from "GNUstep Maintainer <[email protected]>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 83AA E47C E829 A414 6EF8  3420 CA86 8D4C 9914 9679
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

1 participant