[Privoxy-users] GPG Import/Verify fails for Privoxy v3.0.34

[Anthony K]

Hi Ian.

It's probably because I'm not very good with GPG.  Below is what I've tried on my laptop running Ubuntu 22.04.  Spot anything amiss?

*$ ls ./*
privoxy-3.0.34-stable-src.tar.gz privoxy-3.0.34-stable-src.tar.gz.asc

*$ md5sum **
08fba0352666820c8ffbe8a25e76c2c0 privoxy-3.0.34-stable-src.tar.gz
1cb68fcea7da8524360ec6bd1a2755d5 privoxy-3.0.34-stable-src.tar.gz.asc
*
$ gpg --verify privoxy-3.0.34-stable-src.tar.gz.asc *
gpg: assuming signed data in 'privoxy-3.0.34-stable-src.tar.gz'
gpg: Signature made Sun 05 Feb 2023 15:56:40 AEDT
gpg:                using RSA key 4F36C17F3816913654A1E850691822918BA2371C
gpg: Can't check signature: No public key

Cheers,
ak.


On 4/3/24 13:39, Ian Silvester wrote:
> Hi Anthony,
>
> My result is:
>
> $ gpg --verify privoxy-3.0.34-stable-src.tar.gz.asc
> gpg: assuming signed data in 'privoxy-3.0.34-stable-src.tar.gz'
> gpg: Signature made Sat 04 Feb 2023 11:56:40 PM EST
> gpg:                using RSA key 4F36C17F3816913654A1E850691822918BA2371C
> gpg: Good signature from "Fabian Keil<fk at fabiankeil.de>" [expired]
> gpg: Note: This key has expired!
> Primary key fingerprint: 4F36 C17F 3816 9136 54A1  E850 6918 2291 8BA2 371C
>
> I don't know why in your case your gpg installation does not detect the public key. Whilst apparently the key pair has expired, you can easily independently verify that Fabian Keil is a maintainer of the Privoxy project.
>
> Hope this helps,
>
> Ian
>
>
> On Sun, 3 Mar 2024, at 19:40, Anthony K wrote:
>> Hey Ian.
>>
>> Apologies for the omission:
>>
>> I downloaded the TAR.GZ and ASC files from:
>> https://www.privoxy.org/sf-download-mirror/Sources/3.0.34%20%28stable%29/
>>
>>
>> Thanks,
>> ak.
>>
>> On 4/3/24 07:42, Ian Silvester wrote:
>>> Hi Anthony,
>>>
>>> Which installation package are you attempting to verify?
>>>
>>> Cheers,
>>>
>>> Ian
>>>
>>>
>>> On Sun, 3 Mar 2024, at 13:45, Anthony K wrote:
>>>> I'm in the process of installing Privoxy 3.0.34 but unable to verify.
>>>>
>>>> The error messages are exactly as from Jan 2017:
>>>> https://lists.privoxy.org/pipermail/privoxy-users/2017-January/000158.html
>>>>
>>>> Would be good to get it to verify correctly before I install.
>>>> _______________________________________________
>>>> Privoxy-users mailing list
>>>> Privoxy-users at lists.privoxy.org
>>>> https://lists.privoxy.org/mailman/listinfo/privoxy-users
>>> _______________________________________________
>>> Privoxy-users mailing list
>>> Privoxy-users at lists.privoxy.org
>>> https://lists.privoxy.org/mailman/listinfo/privoxy-users
>> _______________________________________________
>> Privoxy-users mailing list
>> Privoxy-users at lists.privoxy.org
>> https://lists.privoxy.org/mailman/listinfo/privoxy-users
> _______________________________________________
> Privoxy-users mailing list
> Privoxy-users at lists.privoxy.org
> https://lists.privoxy.org/mailman/listinfo/privoxy-users