From mboxrd@z Thu Jan 1 00:00:00 1970 From: Catonano Subject: Re: gpg --verify Date: Fri, 17 Feb 2017 14:14:03 +0100 Message-ID: References: <87r32x7zpl.fsf@elephly.net> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary=001a1148e3b41e461d0548b9b0eb Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:33234) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ceiMT-0000Bq-UQ for help-guix@gnu.org; Fri, 17 Feb 2017 08:14:10 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ceiMP-0000pU-Ld for help-guix@gnu.org; Fri, 17 Feb 2017 08:14:09 -0500 Received: from mail-wm0-x22d.google.com ([2a00:1450:400c:c09::22d]:38078) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1ceiMP-0000pL-Ee for help-guix@gnu.org; Fri, 17 Feb 2017 08:14:05 -0500 Received: by mail-wm0-x22d.google.com with SMTP id r141so9888065wmg.1 for ; Fri, 17 Feb 2017 05:14:05 -0800 (PST) In-Reply-To: <87r32x7zpl.fsf@elephly.net> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: Ricardo Wurmus Cc: help-guix --001a1148e3b41e461d0548b9b0eb Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable 2017-02-17 13:45 GMT+01:00 Ricardo Wurmus : > > Catonano writes: > > > $ ls > > Fedora-Workstation-25-1.3-x86_64-CHECKSUM > > Fedora-Workstation-Live-x86_64-25-1.3.iso > > guixsd-usb-install-0.12.0.x86_64-linux > > guixsd-usb-install-0.12.0.x86_64-linux.xz.sig > > Looks like you=E2=80=99ve already unpacked the xz archive. It should wor= k fine > before unpacking. > > Right, sorry for the noise So, this is it now $ gpg --verify guixsd-usb-install-0.12.0.x86_64-linux.xz.sig gpg: i dati sono probabilmente firmati in "guixsd-usb-install-0.12.0.x86_64-linux.xz" gpg: Firma eseguita in data mer 21 dic 2016 13:46:39 CET usando RSA, ID chiave 235FACAC gpg: lookup_hashtable failed: eof gpg: Firma valida da "rekado " gpg: lookup_hashtable failed: eof gpg: ATTENZIONE: questa chiave non =C3=A8 certificata con una firma fidata. gpg: Non ci sono indicazioni che la firma appartenga al proprietario. Impronta digitale chiave primaria: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC There' s a warning data probably signed in "guixsd-usb-install-0.12.0.x86_64-linux.xz" ... this key is not certified with a trusted signature There are no indications that the signature actually belongs to its owner is this good enough ? --001a1148e3b41e461d0548b9b0eb Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
2017-02-17 13:45 GMT+01:00 Ricardo Wurmus <rekado@elephl= y.net>:

Catonano <catonano@gmail.com&g= t; writes:

> $ ls
> Fedora-Workstation-25-1.3-x86_64-CHECKSUM
> Fedora-Workstation-Live-x86_64-25-1.3.iso
> guixsd-usb-install-0.12.0.x86_64-linux
> guixsd-usb-install-0.12.0.x86_64-linux.xz.sig

Looks like you=E2=80=99ve already unpacked the xz archive.=C2=A0 It = should work fine
before unpacking.



Right, sorry for the noi= se

So, this is it now

$ gpg --verify guixsd-usb-in= stall-0.12.0.x86_64-linux.xz.sig
gpg: i dati sono probabilmente firmati= in "guixsd-usb-install-0.12.0.x86_64-linux.xz"
gpg: Firma ese= guita in data mer 21 dic 2016 13:46:39 CET usando RSA, ID chiave 235FACACgpg: lookup_hashtable failed: eof
gpg: Firma valida da "rekado &l= t;rekado@elephly.net>"gpg: lookup_hashtable failed: eof
gpg: ATTENZIONE: questa chiave non = =C3=A8 certificata con una firma fidata.
gpg:=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 Non ci sono indicazioni che la firma appartenga= al proprietario.
Impronta digitale chiave primaria: BCA6 89B6 3655 3801= C3C6=C2=A0 2150 197A 5888 235F ACAC

There' s a warni= ng

data probably signed in "guixsd-usb-install-0.12.= 0.x86_64-linux.xz"
...
this key is not certified with= a trusted signature
There are no indications that the signat= ure actually belongs to its owner

is this good enough ?
--001a1148e3b41e461d0548b9b0eb--