From mboxrd@z Thu Jan  1 00:00:00 1970
From: Andreas Enge <andreas@enge.fr>
Subject: Re: GPG warning when installing on Debian 9
Date: Mon, 22 Jan 2018 20:41:07 +0100
Message-ID: <20180122194107.GA1321@jurong>
References: <CAMhuX2AYsTET_u09Bu7XuBz0fdM-09cJi6J31p6PbFXcOsjjPg@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-15
Content-Transfer-Encoding: quoted-printable
Return-path: <help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org>
Received: from eggs.gnu.org ([2001:4830:134:3::10]:46457)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <andreas@enge.fr>) id 1edhxy-0005hm-Nk
	for help-guix@gnu.org; Mon, 22 Jan 2018 14:41:15 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <andreas@enge.fr>) id 1edhxx-0002TP-Vu
	for help-guix@gnu.org; Mon, 22 Jan 2018 14:41:14 -0500
Received: from hera.aquilenet.fr ([2a0c:e300::1]:34538)
	by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32)
	(Exim 4.71) (envelope-from <andreas@enge.fr>) id 1edhxx-0002Sg-Op
	for help-guix@gnu.org; Mon, 22 Jan 2018 14:41:13 -0500
Content-Disposition: inline
In-Reply-To: <CAMhuX2AYsTET_u09Bu7XuBz0fdM-09cJi6J31p6PbFXcOsjjPg@mail.gmail.com>
List-Id: <help-guix.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/help-guix>,
	<mailto:help-guix-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/help-guix/>
List-Post: <mailto:help-guix@gnu.org>
List-Help: <mailto:help-guix-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/help-guix>,
	<mailto:help-guix-request@gnu.org?subject=subscribe>
Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org
Sender: "Help-Guix" <help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org>
To: Evan Rowley <rowley.evan@gmail.com>
Cc: help-guix@gnu.org

Hello,

On Mon, Jan 22, 2018 at 01:32:39PM -0500, Evan Rowley wrote:
> gpg: Good signature from "Ludovic Court=E8s <ludo@gnu.org>" [unknown]
> gpg: WARNING: This key is not certified with a trusted signature!
> gpg:=A0=A0=A0=A0=A0=A0=A0=A0=A0 There is no indication that the signatu=
re belongs to the owner.
> Primary key fingerprint: 3CE4 6455 8A84 FDC6 9DB4=A0 0CFB 090B 1199 3D9=
A EBB5
>=20
> The 2nd & 3rd to last lines seem somewhat concerning. This is the messa=
ge I
> recieve even after following the step to add the public key from the MI=
T
> server.

this is expected, and it means that you did not assign any trust value to
the key used for signing. To simplify things extremely, it means that the
software was signed by the key "3CE4...", but that you do not know Ludovi=
c
Court=E8s, and in particular do not know that this key really belongs to =
the
Ludovic Court=E8s person as it is claimed.

So things are fine, no need to worry.

Andreas