Bad GPG sig on guix .16.0x86_64

Bad GPG sig on guix .16.0x86_64

[Sebastian]

Hello, Developer.
I was intreged by the OS and decided to try it.
I noticed that the GPG sig was bad and thought I should let you know.
(or perhaps I did something wrong, let me know.)

Terminal:
seb@seb-pc ~/Downloads> gpg --verify guixsd-install-0.16.0.x86_64-li
gpg: no signed data
gpg: can't hash datafile: No data
seb@seb-pc ~/Downloads> gpg --verify guixsd-install-0.16.0.x86_64-li0.x86_64-linux.iso
gpg: Signature made Thu 06 Dec 2018 09:32:25 AM MST
gpg:                using RSA key 3CE464558A84FDC69DB40CFB090B11993D
gpg: Can't check signature: No public key
seb@seb-pc ~/Downloads> gpg --keyserver pool.sks-keyservers.net \
                              --recv-keys 3CE464558A84FDC69DB40CFB09
                        
gpg: key 090B11993D9AEBB5: 124 signatures not checked due to missing
gpg: key 090B11993D9AEBB5: public key "Ludovic Courtès <ludo@gnu.org
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1
seb@seb-pc ~/Downloads> gpg --verify guixsd-install-0.16.0.x86_64-li0.x86_64-linux.iso
gpg: Signature made Thu 06 Dec 2018 09:32:25 AM MST
gpg:                using RSA key 3CE464558A84FDC69DB40CFB090B11993D
gpg: BAD signature from "Ludovic Courtès <ludo@gnu.org>" [unknown]

Re: Bad GPG sig on guix .16.0x86_64

[Leo Famulari]

[-- Attachment #1: Type: text/plain, Size: 830 bytes --]

On Mon, Jan 14, 2019 at 09:49:14PM -0800, Sebastian wrote:
> Hello, Developer.
> I was intreged by the OS and decided to try it.
> I noticed that the GPG sig was bad and thought I should let you know.
> (or perhaps I did something wrong, let me know.)

Thanks for reaching out!

> seb@seb-pc ~/Downloads> gpg --verify guixsd-install-0.16.0.x86_64-li0.x86_64-linux.iso
> gpg: Signature made Thu 06 Dec 2018 09:32:25 AM MST
> gpg:                using RSA key 3CE464558A84FDC69DB40CFB090B11993D
> gpg: BAD signature from "Ludovic Courtès <ludo@gnu.org>" [unknown]

The signature is of the file
'guixsd-install-0.16.0.x86_64-linux.iso.xz'.

Note that you have tried verifying the signature against
'guixsd-install-0.16.0.x86_64-li0.x86_64-linux.iso'.

Can you try again, making sure to refer to the correct file?

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]