Joel Rees wrote:
> gpg: Signature made Thu 03 Mar 2011 12:34:51 PM JST using RSA key ID 069C8460
> gpg: Good signature from "Fedora (15) <fed...@fedoraproject.org>"
> gpg: WARNING: This key is not certified with a trusted signature!
> gpg:          There is no indication that the signature belongs to the owner.
> Primary key fingerprint: 25DB B54B DED7 0987 F4C1  0042 B4EB F579 069C 8460
>
> but I don't find either the key or the fingerprint at
> https://fedoraproject.org/keys.

I just pushed a fix for this to the fedora-web git repository¹.  When
the website syncs next it should be on the /keys page.  That is the
proper key and fingerprint (though I don't expect you to just take my
word for that ;).

The key file was already uploaded to the site.  You can grab it from
https://fedoraproject.org/static/069C8460.txt or pull all the Fedora
and EPEL keys from https://fedoraproject.org/static/fedora.gpg.  A
handy shortcut for getting them is:

    curl https://fedoraproject.org/static/fedora.gpg | gpg --import

¹ http://git.fedorahosted.org/git/?p=fedora-web.git;a=commitdiff;h=12f71c9c

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
To have a successful relationship, I must learn to make it look like
I'm giving as much as I'm getting.

Attachment: pgp2lGdhTZvrZ.pgp
Description: PGP signature

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

Reply via email to