________________________________
Da: Thomas Schmitt
Inviato: Venerdì, 28 Marzo, 2025 08:50
A: debian-user@lists.debian.org
Cc: pierantonio.corrad...@gmail.com
Oggetto: Re: Help: debian-12.10.0-amd64-netinst.iso autenticity test
Hi,
(Please Cc: debian-user@lists.debian.org with your replies.
I sent my mail with Cc; to you, because the X-Spam-Status: header of
your list mail did not indicate that you are subscribed to the list.)
Pier Antonio Corradini wrote:
> So... first step:
> PS C:\Users\CP> gpg --keyserver hkps://keyring.debian.org --recv-keys
> DF9B9C49EAA9298432589D76DA87E80D6294BE9B
> [...]
> Second step:
> PS C:\Users\CP\Documents\Linux\Debian12.10.0\VersioneHTTP>
> gpg --verify SHA512SUMS.sign SHA512SUMS.txt
> gpg: Firma effettuata 03/15/25 21:33:08 ora solare Europa occidentale
> gpg: utilizzando la chiave RSA
> DF9B9C49EAA9298432589D76DA87E80D6294BE9B
Did this second-step run succeed ?
It seems that the decisive message line is missing.
(Not that i would really understand the language in the messages.)
Firma effettuata 03/15/25 21:33:08 ora solare Europa occidentale = Signature
made 03/15/25 21:33:08 Western European Standard Time
utilizzando la chiave RSA DF9B9C49EAA9298432589D76DA87E80D6294BE9B = using the
RSA key DF9B9C49EAA9298432589D76DA87E80D6294BE9B
It seems that the decisive message line is missing? What message?
> third step:
> PS C:\Users\CP\Documents\Linux\Debian12.10.0\VersioneHTTP> gpg --output
> debian-key.asc --export DF9B9C49EAA9298432589D76DA87E80D6294BE9B
> Il file 'debian-key.asc' esiste. Sovrascrivere? (y/N) y
> to import it inside Kleopatra...and... bad signature inside Kleopatra!
Is Kleopatra
https://www.openpgp.org/software/kleopatra/
?
Yes.
> Inside console:
> PS C:\Users\CP\Documents\Linux\Debian12.10.0\VersioneHTTP> gpg --verify
> SHA512SUMS.sign SHA512SUMS.txt
> gpg: Firma effettuata 03/15/25 21:33:08 ora solare Europa occidentale
> gpg: utilizzando la chiave RSA
> DF9B9C49EAA9298432589D76DA87E80D6294BE9B
> gpg: Firma BAD da "Debian CD signing key <debian...@lists.debian.org>"
> [sconosciuto]
If the result is different from the one of step 2:
What has changed since step 2 ?
I don't understand the question. I can only say that Kleopatra and Console
produce the same result: BAD signature.
> Where is the mistake?
I have to repeat my questions for checksums of the non-matching files
SHA512SUMS.sign
SHA512SUMS
(I could make use of MD5, SHA256, or SHA512.)
Reason for this request:
If gpg --verify reports mismatch, then either:
- at least one of the two files must show differences to those which i
downloaded yesterday,
- or something is broken with you gpg --verify run.
Knowing whether the files SHA512SUMS.sign and SHA512SUMS are the same
as the copies on my computer would enable us to judge which of the
above reasons is present.
This is what the link files you sent me look like:
-----BEGIN PGP SIGNATURE-----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=kdXj
-----END PGP SIGNATURE-----
cb089def0684fd93c9c2fbe45fd16ecc809c949a6fd0c91ee199faefe7d4b82b64658a264a13109d59f1a40ac3080be2f7bd3d8bf3e9cdf509add6d72576a79b
debian-12.10.0-amd64-netinst.iso
71d4c4e2ea7b617362875a74eb007308ae577ebe4b02ffeb626f1d12eaf412567d1d1816dbdbbb84cfaa38a205c13abf317ec227e5b2df9c982979698909889c
debian-edu-12.10.0-amd64-netinst.iso
269e64d2a379429905cf95191036cc53fdc148c624af68386d3a238f5fe2c5b03e3732706eaac175303b1fe327f691dc50faf8d65665781d6bcbbabf072559fa
debian-mac-12.10.0-amd64-netinst.iso
Have a nice day :)
Thanks! And so to you.
Thomas
PA
