From mboxrd@z Thu Jan 1 00:00:00 1970 From: Evan Rowley Subject: GPG warning when installing on Debian 9 Date: Mon, 22 Jan 2018 13:32:39 -0500 Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="001a113f7712b5c458056361a79a" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:43199) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1edgtj-0007KQ-TD for help-guix@gnu.org; Mon, 22 Jan 2018 13:32:53 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1edgte-0002vL-5f for help-guix@gnu.org; Mon, 22 Jan 2018 13:32:47 -0500 Received: from mail-io0-x233.google.com ([2607:f8b0:4001:c06::233]:42038) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1edgte-0002ux-0i for help-guix@gnu.org; Mon, 22 Jan 2018 13:32:42 -0500 Received: by mail-io0-x233.google.com with SMTP id 25so10445619ioj.9 for ; Mon, 22 Jan 2018 10:32:41 -0800 (PST) List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: help-guix@gnu.org --001a113f7712b5c458056361a79a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi All, When attempting to install on Debian 9, the following was shown. I just wanted to ask here if this was the expected output. evan@c32foss:~$ gpg --verify guix-binary-0.14.0.x86_64-linux.tar.xz.sig gpg: assuming signed data in 'guix-binary-0.14.0.x86_64-linux.tar.xz' gpg: Signature made Thu 07 Dec 2017 03:30:08 AM EST gpg: using RSA key 3CE464558A84FDC69DB40CFB090B11993D9AEBB5 gpg: Good signature from "Ludovic Court=C3=A8s " [unknown] gpg: aka "Ludovic Court=C3=A8s " [unknown= ] gpg: aka "Ludovic Court=C3=A8s (Inria) " [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 The 2nd & 3rd to last lines seem somewhat concerning. This is the message I recieve even after following the step to add the public key from the MIT server. Steps I am referring to are here: https://www.gnu.org/software/guix/manual/html_node/Binary-Installation.html= #Binary-Installation --=20 - EJR --001a113f7712b5c458056361a79a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi All,

When attempting to ins= tall on Debian 9, the following was shown. I just wanted to ask here if thi= s was the expected output.

evan@c32foss:~$ gpg --verify guix-binary-= 0.14.0.x86_64-linux.tar.xz.sig gpg: assuming signed data in 'guix-binar= y-0.14.0.x86_64-linux.tar.xz'
gpg: Signature made Thu 07 Dec 2017 03= :30:08 AM EST
gpg:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 using RSA key 3CE464558A84FDC69DB40CFB= 090B11993D9AEBB5
gpg: Good signature from "Ludovic Court=C3=A8s <= ;ludo@gnu.org>" [unknown]
gp= g:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 aka "Ludovic Court=C3=A8s <ludo@chbouib.org>" [unknown]
gpg:=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 aka "Ludovic Court=C3=A8s (Inria) <ludovic.courtes@inria.fr>" [unknown= ]
gpg: WARNING: This key is not certified with a trusted signature!
g= pg:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 There is no indic= ation that the signature belongs to the owner.
Primary key fingerprint: = 3CE4 6455 8A84 FDC6 9DB4=C2=A0 0CFB 090B 1199 3D9A EBB5

The 2n= d & 3rd to last lines seem somewhat concerning. This is the message I r= ecieve even after following the step to add the public key from the MIT ser= ver.

Steps I am referring to are here: https://www.gnu.org/software/guix/manual/html_node/Binary-Install= ation.html#Binary-Installation



<= div>

--
=C2=A0- EJR
--001a113f7712b5c458056361a79a--