Wrong PGP key #259

Closed
amilopowers opened this Issue May 11, 2016 · 1 comment

Comments

Projects
None yet
2 participants
@amilopowers

I wanted to retry your ROM today. When I checked the PGP signature I got an error:

[amilopowers@localhost Downloads]$ gpg --verify hammerhead-factory-2016.05.08.05.30.34.tar.xz.sig hammerhead-factory-2016.05.08.05.30.34.tar.xz
gpg: Unterschrift vom Son 08 Mai 2016 09:00:31 CEST mittels RSA-Schlüssel ID 9AF5F22A
gpg: Korrekte Unterschrift von "Daniel Micay <danielmicay@gmail.com>"
gpg:                     alias "Daniel Micay <daniel.micay@copperhead.co>"
gpg: WARNUNG: Dieser Schlüssel trägt keine vertrauenswürdige Signatur!
gpg:          Es gibt keinen Hinweis, daß die Signatur wirklich dem vorgeblichen Besitzer gehört.
Haupt-Fingerabdruck  = 65EE FE02 2108 E2B7 08CB  FCF7 F9E7 12E5 9AF5 F22A
[amilopowers@localhost Downloads]$ 
@thestinger

This comment has been minimized.

Show comment Hide comment
@thestinger

thestinger May 11, 2016

Contributor

That's not an error. It's reporting that it's a valid signature from a key that you haven't marked with any level of trust, and you don't have the keys it's signed with marked with trust either.

Contributor

thestinger commented May 11, 2016

That's not an error. It's reporting that it's a valid signature from a key that you haven't marked with any level of trust, and you don't have the keys it's signed with marked with trust either.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment