Re: Checking the signature of a tarball

[Axel Beckert]

Hi,

On Mon, Jan 12, 2015 at 09:13:26AM +0000, DECLOEDT Loic EVADERIS wrote:
> I would like to understand what is required to check the PGP signature of a 
> tar archive. I tried it the simplest way:
> 
> -          Download and screen-4.2.1.tar.gz and screen-4.2.1.tar.gz.sig
> 
> -          Executed the check command, with the following result:
> > gpg --verify screen-4.2.1.tar.gz.sig screen-4.2.1.tar.gz
> gpg: Signature made Mon 28 Apr 2014 12:28:10 AM CEST using RSA key ID C53EF3A4
> gpg: Can't check signature: No public key
> 
> As far as I remember, I need to import a public key into my PGP ring before, 
> but did not found the file required to check the 'screen' archive. Can 
> someone point me to the right one ?

Go to https://savannah.gnu.org/projects/screen/ and click on "Project
Members GPG Keyring".

                Kind regards, Axel
-- 
/~\  Plain Text Ribbon Campaign                   | Axel Beckert
\ /  Say No to HTML in E-Mail and News            | address@hidden  (Mail)
 X   See http://www.nonhtmlmail.org/campaign.html | address@hidden (Mail+Jabber)
/ \  I love long mails: http://email.is-not-s.ms/ | http://abe.noone.org/ (Web)