gpg: Bad signature - Githubissues

sakaki- / gentoo-on-rpi-64bit

Bootable 64-bit Gentoo image for the Raspberry Pi4B, 3B & 3B+, with Linux 5.4, OpenRC, Xfce4, VC4/V3D, camera and h/w codec support, weekly-autobuild binhost

GNU General Public License v3.0

918 stars 126 forks source link

gpg: Bad signature #183

Closed PatrickLohan closed 4 years ago

PatrickLohan commented 4 years ago

IWhen verifying with gpg I get back the Bad signature error.

Steps tried:

wget -c https://github.com/sakaki-/gentoo-on-rpi-64bit/releases/download/v1.6.0/genpi64.img.xz
wget -c https://github.com/sakaki-/gentoo-on-rpi-64bit/releases/download/v1.6.0/genpi64.img.xz.asc
gpg --keyserver hkp://ipv4.pool.sks-keyservers.net:80 --recv-key DDE76CEA
gpg --verify genpi64.img.xz.asc genpi64.img.xz

I also tried the direct link for the same(?) file.

sakaki- commented 4 years ago

Please post the output of:

$ md5sum genpi64.img.xz.asc genpi64.img.xz

PatrickLohan commented 4 years ago

b2c6163c357f7d37a162b6bb4a9d0872  genpi64.img.xz.asc
12b78242d86373c9479d45af58b419c6  genpi64.img.xz

PatrickLohan commented 4 years ago

I did try downloading several times. I can try again this evening just in case.

sakaki- commented 4 years ago

Your genpi64.img.xz file is correct, but something is wrong with your copy of the signature file, genpi64.img.xz.asc. The md5sum output should be:

7f331efc323ddd9442d4fdf374fddd41  genpi64.img.xz.asc
12b78242d86373c9479d45af58b419c6  genpi64.img.xz

I just downloaded the two files from GitHub again myself using wget, to check, and everything looks ok.

Delete genpi64.img.xz.asc and try fetching it again.

hth, sakaki

sakaki- commented 4 years ago

Here's the contents of genpi64.img.xz.asc itself:

PatrickLohan commented 4 years ago

Well, basic error, thanks for advising to dl the asc file again! That was indee where the error was, and now I've got the usual 'Good sig, not certified etc.' message. Thanks @sakaki-