Hi Jeremy, thanks for at least getting back to me. However, i think you are on the wrong track. Have you tried verifying a DVD iso signature (not a CD)? I get the feeling that you haven't.
This is what i get on a new installation: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xFBB75451 gpg: requesting key FBB75451 from hkp server keyserver.ubuntu.com gpg: key FBB75451: public key "Ubuntu CD Image Automatic Signing Key <cdim...@ubuntu.com>" imported gpg: no ultimately trusted keys found gpg: Total number processed: 1 gpg: imported: 1 $ gpg --verify MD5SUMS.gpg MD5SUMS gpg: Signature made Cum 30 Apr 2010 11:03:30 EEST using DSA key ID FBB75451 gpg: BAD signature from "Ubuntu CD Image Automatic Signing Key <cdim...@ubuntu.com>" $ Verify these 2 please, and please post an update here whether you CAN or CAN'T verify them: http://cdimage.ubuntu.com/releases/10.04/release/MD5SUMS.gpg http://cdimage.ubuntu.com/releases/10.04/release/MD5SUMS P.S. To make abs sure we are on the same track, this is the file i'm trying to verify: http://cdimage.ubuntu.com/releases/10.04/release/ubuntu-10.04-dvd-i386.iso Thanks. ** Changed in: linux (Ubuntu) Status: Incomplete => Confirmed ** Tags removed: needs-upstream-testing -- Bad signatures for 10.04 installer validation: MD5SUM SHA1SUM SHA256SUM https://bugs.launchpad.net/bugs/574184 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs