Verifying iso signature fails

hamid · 2018-02-09 09:47:28

Hello,

The following command to verify the signature of the Archlinux ISO image does not work.

$ gpg --keyserver-options auto-key-retrieve --verify archlinux-2018.02.01-x86_64.iso.sig
gpg: assuming signed data in 'archlinux-2018.02.01-x86_64.iso'
gpg: Signature made پنجشنبه ۰۱ فوریه ۱۸، ۲۱:
gpg: using RSA key 7F2D434B9741E8AC
gpg: requesting key 7F2D434B9741E8AC from hkp server pool.sks-keyservers.net
gpg: Can't check signature: No public key

What is the problem?

Allan · 2018-02-09 10:31:10

Seems downloading the key failed.

hamid · 2018-02-09 17:27:53

Is this usual or on purpose?

progandy · 2018-02-09 17:48:17

It should work. Can you search or download the key manually? My keyserver is configured as hkps://hkps.pool.sks-keyservers.net and I can find the key.

$ gpg --search-key 7F2D434B9741E8AC
gpg: data source: https://[2a02:c205:3001:3626::1]:443
(1)	Pierre Schmitz <pierre@archlinux.de>
	  2048 bit RSA key 7F2D434B9741E8AC, created: 2011-04-10
Keys 1-1 of 1 for "7F2D434B9741E8AC".  Enter number(s), N)ext, or Q)uit > 1
gpg: key 7F2D434B9741E8AC: 28 signatures not checked due to missing keys
gpg: key 7F2D434B9741E8AC: public key "Pierre Schmitz <pierre@archlinux.de>" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1

If you have arch already, then the key should be in the pacman keyring, so you could use

pacman-key --verify

Last edited by progandy (2018-02-09 17:48:55)

Arch Linux

#1 2018-02-09 09:47:28

Verifying iso signature fails

#2 2018-02-09 10:31:10

Re: Verifying iso signature fails

#3 2018-02-09 17:27:53

Re: Verifying iso signature fails

#4 2018-02-09 17:48:17

Re: Verifying iso signature fails

Board footer