Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Verification fail #1116

Closed
HanZeno opened this issue Dec 23, 2017 · 17 comments
Closed

Verification fail #1116

HanZeno opened this issue Dec 23, 2017 · 17 comments

Comments

@HanZeno
Copy link

HanZeno commented Dec 23, 2017

had gpg verification fail of Bisq-0.6.2.dmg.asc (F379A1C6.asc) today. Im noob at GPG so probably it's just me, but please have a look. Also maybe the verification guide could be written better.

@DarkSatyr
Copy link

The same for me
Maybe I'm wrong somewhere, but I've tried to do next:
gpg --keyserver pgp.mit.edu --recv-keys 1DC3 C8C4 316A 698A C494 039C F5B8 4436 F379 A1C6 gpg --digest-algo SHA256 --verify /Users/user_1/Downloads/F379A1C6.asc

Also tried to import key, but had no success:
gpg --import /Users/iastremskyi/Downloads/F379A1C6.asc

At the end got - "gpg: verify signatures failed: Unexpected error"
Please help

@DarkSatyr
Copy link

ok, looks like this is my mistake, I've tried to use Public Key instead of signature from here https://github.com/bisq-network/exchange/releases/tag/v0.6.2

@HanZeno
Copy link
Author

HanZeno commented Jan 3, 2018

ManfredKarrer : "Bisq-0.6.2.dmg.asc" doesn't provide any signatures upon GPG keychain sign verification on mac os x
https://imgur.com/a/UlTe6

Please just confirm that it's signed instead of closing the topic.

@ManfredKarrer
Copy link
Member

Just checked again and is valid for me:

gpg --digest-algo SHA256 --verify Bisq-0.6.2.dmg{.asc*,}
gpg: Signature made Wed Dec 20 21:22:51 2017 CET
gpg: using RSA key 1DC3C8C4316A698AC494039CF5B84436F379A1C6
gpg: issuer "manfred@bitsquare.io"
gpg: Good signature from "Manfred Karrer manfred@bitsquare.io" [ultimate]

@ManfredKarrer ManfredKarrer reopened this Jan 3, 2018
@HanZeno
Copy link
Author

HanZeno commented Jan 3, 2018 via email

@ManfredKarrer
Copy link
Member

ManfredKarrer commented Jan 3, 2018

That is a different hash I get. How are you creating it?
$ shasum -a 256 Bisq-0.6.2.dmg
4b774299d0fe8f2da5e3bd09b90bc1d72d21f203dadc80fdc3c5475e1f8cb3eb

@HanZeno
Copy link
Author

HanZeno commented Jan 3, 2018 via email

@ManfredKarrer
Copy link
Member

You downloaded from https://github.com/bisq-network/exchange/releases/tag/v0.6.2?
I downloaded again from https://bisq.network/downloads/ and got the same hash as above.
Do you have a proxy or anything or VPS? Can you try from another internet connection or computer? Please let me know once you found out what caused the issue.

@ManfredKarrer
Copy link
Member

Ps: Don't run the file if the hash does not match 4b774299d0fe8f2da5e3bd09b90bc1d72d21f203dadc80fdc3c5475e1f8cb3eb

@HanZeno
Copy link
Author

HanZeno commented Jan 3, 2018 via email

@ManfredKarrer
Copy link
Member

ManfredKarrer commented Jan 3, 2018

I just downloaded again from https://github.com/bisq-network/exchange/releases/tag/v0.6.2 as well as from the bisq.network download page (links to the same URL). Both result in hash: 4b774299d0fe8f2da5e3bd09b90bc1d72d21f203dadc80fdc3c5475e1f8cb3eb

@ManfredKarrer
Copy link
Member

@cbeams, @mrosseel: Could you make a test download with a sig check and post the hash to double check?

@HanZeno
Copy link
Author

HanZeno commented Jan 4, 2018 via email

@ManfredKarrer
Copy link
Member

Did you find out what has changed? Check your internet connection to not be MITM attacked...

@HanZeno
Copy link
Author

HanZeno commented Jan 4, 2018 via email

@ManfredKarrer
Copy link
Member

Ah good it was nothing serious!
I understand that for not tech-savvy people such things are hard, because of that we have added the in-app-downloader which does all that download and sig checks in the app. Then only the first time download need to be done manually.

@HanZeno
Copy link
Author

HanZeno commented Nov 22, 2018 via email

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants