[Privoxy-users] GPG Import/Verify fails for Privoxy v3.0.34

[Anthony K]

Oh dear - ignore those asterisks - it was me trying to bold the commands and Thunderbird appears to have mangled it badly...

On 4/3/24 18:26, Anthony K wrote:
> Hi Ian.
>
> It's probably because I'm not very good with GPG.  Below is what I've tried on my laptop running Ubuntu 22.04.  Spot anything amiss?
>
> *$ ls ./*
> privoxy-3.0.34-stable-src.tar.gz privoxy-3.0.34-stable-src.tar.gz.asc
>
> *$ md5sum **
> 08fba0352666820c8ffbe8a25e76c2c0 privoxy-3.0.34-stable-src.tar.gz
> 1cb68fcea7da8524360ec6bd1a2755d5 privoxy-3.0.34-stable-src.tar.gz.asc
> *
> $ gpg --verify privoxy-3.0.34-stable-src.tar.gz.asc *
> gpg: assuming signed data in 'privoxy-3.0.34-stable-src.tar.gz'
> gpg: Signature made Sun 05 Feb 2023 15:56:40 AEDT
> gpg:                using RSA key 4F36C17F3816913654A1E850691822918BA2371C
> gpg: Can't check signature: No public key
>
> Cheers,
> ak.
>
>
> On 4/3/24 13:39, Ian Silvester wrote:
>> Hi Anthony,
>>
>> My result is:
>>
>> $ gpg --verify privoxy-3.0.34-stable-src.tar.gz.asc
>> gpg: assuming signed data in 'privoxy-3.0.34-stable-src.tar.gz'
>> gpg: Signature made Sat 04 Feb 2023 11:56:40 PM EST
>> gpg:                using RSA key 4F36C17F3816913654A1E850691822918BA2371C
>> gpg: Good signature from "Fabian Keil<fk at fabiankeil.de>" [expired]
>> gpg: Note: This key has expired!
>> Primary key fingerprint: 4F36 C17F 3816 9136 54A1  E850 6918 2291 8BA2 371C
>>
>> I don't know why in your case your gpg installation does not detect the public key. Whilst apparently the key pair has expired, you can easily independently verify that Fabian Keil is a maintainer of the Privoxy project.
>>
>> Hope this helps,
>>
>> Ian
>>
>>
>> On Sun, 3 Mar 2024, at 19:40, Anthony K wrote:
>>> Hey Ian.
>>>
>>> Apologies for the omission:
>>>
>>> I downloaded the TAR.GZ and ASC files from:
>>> https://www.privoxy.org/sf-download-mirror/Sources/3.0.34%20%28stable%29/
>>>
>>>
>>> Thanks,
>>> ak.
>>>
>>> On 4/3/24 07:42, Ian Silvester wrote:
>>>> Hi Anthony,
>>>>
>>>> Which installation package are you attempting to verify?
>>>>
>>>> Cheers,
>>>>
>>>> Ian
>>>>
>>>>
>>>> On Sun, 3 Mar 2024, at 13:45, Anthony K wrote:
>>>>> I'm in the process of installing Privoxy 3.0.34 but unable to verify.
>>>>>
>>>>> The error messages are exactly as from Jan 2017:
>>>>> https://lists.privoxy.org/pipermail/privoxy-users/2017-January/000158.html
>>>>>
>>>>> Would be good to get it to verify correctly before I install.
>>>>> _______________________________________________
>>>>> Privoxy-users mailing list
>>>>> Privoxy-users at lists.privoxy.org
>>>>> https://lists.privoxy.org/mailman/listinfo/privoxy-users
>>>> _______________________________________________
>>>> Privoxy-users mailing list
>>>> Privoxy-users at lists.privoxy.org
>>>> https://lists.privoxy.org/mailman/listinfo/privoxy-users
>>> _______________________________________________
>>> Privoxy-users mailing list
>>> Privoxy-users at lists.privoxy.org
>>> https://lists.privoxy.org/mailman/listinfo/privoxy-users
>> _______________________________________________
>> Privoxy-users mailing list
>> Privoxy-users at lists.privoxy.org
>> https://lists.privoxy.org/mailman/listinfo/privoxy-users
> _______________________________________________
> Privoxy-users mailing list
> Privoxy-users at lists.privoxy.org
> https://lists.privoxy.org/mailman/listinfo/privoxy-users
>