[Bug 1331057] [NEW] Can't be used to verify current trusty images

[dann frazier]

Public bug reported:

The description of this package says "This package contains the keys
used for files on cloud-images.ubuntu.com." However, the checksum files
are signed with keyid 7DB87C81, which I can't find in this package.

ubuntu at server-46af3152-8a83-4995-8dfb-e3b2d07e0841:~$ wget http://cloud-images.ubuntu.com/trusty/current/SHA256SUMS http://cloud-images.ubuntu.com/trusty/current/SHA256SUMS.gpg
ubuntu at server-46af3152-8a83-4995-8dfb-e3b2d07e0841:~$ gpg --verify SHA256SUMS.gpg SHA256SUMS
gpg: Signature made Sat 14 Jun 2014 01:03:39 PM UTC using RSA key ID 7DB87C81
gpg: Can't check signature: public key not found
ubuntu at server-46af3152-8a83-4995-8dfb-e3b2d07e0841:~$ gpg --keyring /usr/share/keyrings/ubuntu-cloudimage-keyring.gpg --list-keys/usr/share/keyrings/ubuntu-cloudimage-keyring.gpg
-------------------------------------------------
pub   4096R/476CF100 2012-10-27
uid                  Ubuntu Cloud Image Builder (Canonical Internal Cloud Image Builder) <ubuntu-cloudbuilder-noreply at canonical.com>
sub   4096R/9D817405 2012-10-27

ubuntu at server-46af3152-8a83-4995-8dfb-e3b2d07e0841:~$ dpkg -l ubuntu-cloudimage-keyring
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-p end
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                       Version            Architecture       Description
+++-==========================-==================-==================-=========================================================
ii  ubuntu-cloudimage-keyring  2013.11.11         all                GnuPG keys of the Ubuntu Cloud Image builder

** Affects: ubuntu-cloudimage-keyring (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to ubuntu-cloudimage-keyring in Ubuntu.
https://bugs.launchpad.net/bugs/1331057

Title:
  Can't be used to verify current trusty images

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-cloudimage-keyring/+bug/1331057/+subscriptions