I downloaded stuff from https://gnupg.org/download/index.html and signatures from https://gnupg.org/signature_key.asc

Checking the signatures produced those two failures:

npth-1.6.tar.bz2
gpg: Signature made Mon Jul 16 00:37:23 2018 PDT
gpg: using RSA key D8692123C4065DEA5E0F3AB5249B39D24F25E3B6
gpg: Can't check signature: No public key

gpa-0.10.0.tar.bz2
gpg: Signature made Tue Oct 16 14:46:51 2018 PDT
gpg: using RSA key D8692123C4065DEA5E0F3AB5249B39D24F25E3B6
gpg: Can't check signature: No public key

Web search seems to indicate that those are old signatures by Werner Koch.

Maybe the above downloads should be re-signed with the current signature or perhaps the old one could be added to the public key block?

KK



_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to