search

Blockstream / green_qt

Blockstream Green App
GNU General Public License v3.0
188 stars 31 forks source link

Can't verify the Blockstream Green binaries #74

Closed mamolas closed 6 months ago

mamolas commented 1 year ago

Docs describes how to verify the signature https://help.blockstream.com/hc/en-us/articles/900002174043-How-do-I-verify-the-Blockstream-Green-binaries-

but the releases are missing the PGP signature file (.sig) to verify the binaries

$ gpg --verify SHA256SUMS.asc BlockstreamGreen-x86_64.AppImage

gpg: not a detached signature
bloodgroup-cplusplus commented 1 year ago

I tried the two steps from the documentation on a mac (apple silicon) and it verified with a few warnings Import the public key:

gpg --keyserver keyserver.ubuntu.com --recv-keys "04BE BF2E 35A2 AF2F FDF1 FA5D E7F0 54AA 2E76 E792"

Verify the signed hashes of the downloaded binaries:

gpg --verify SHA256SUMS.as

Screen Shot 2022-08-21 at 22 59 24

what os are you on currently ? It could be due to different os

bitcoin3us commented 6 months ago

When I run the command: gpg --keyserver keyserver.ubuntu.com --recv-keys "04BE BF2E 35A2 AF2F FDF1 FA5D E7F0 54AA 2E76 E792"

I get the following response: gpg: keyserver receive failed: No route to host

I'm running a Mac on Apple Silicon. Is there something I'm missing?

jgriffiths commented 6 months ago

@bitcoin3us keyservers can be flaky and aren't always available; this is an issue with the keyserver infrastructure and not a Green issue per se.

Please try one of the keyservers listed at e.g. https://www.reddit.com/r/GnuPG/comments/ix2gdj/what_pgp_key_server_to_use/ or retry the ubuntu server.