My PGP troubles

Caleb Marcus caleb.marcus at gmail.com
Wed Feb 20 17:35:35 GMT 2008


Yep. It looks like it's just your client... by the way, should we set up
some sort of general policy on what types of ID will be accepted, or
should it be left up to the individual signing the key? Are we using
some sort of a formal keysigning method, or just letting people sign
each other's keys freely? If it's the former, we should post some
guidelines on the installfest page so people know what to prepare.
On Wed, 2008-02-20 at 12:30 -0500, leftyfb wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> gpg: Signature made Wed 20 Feb 2008 12:19:11 PM EST using DSA key ID
> 2926DE3E
> gpg: Good signature from "Caleb Marcus <caleb.marcus at gmail.com>"
> gpg: WARNING: This key is not certified with a trusted signature!
> gpg:          There is no indication that the signature belongs to the
> owner.
> 
> It seems to work now. Untrusted, but we'll fix that at the installfest
> or something when we finally get to key signing.
> 
> Caleb Marcus wrote:
> > Hmm. Well, it could be that I'm not using inline-PGP... can you try
> > verifying this bit of clearsigned text (copy it into a text file and run
> > this command: gpg --verify filename
> > 
> > bit of clearsigned text
> 
> On Wed, 2008-02-20 at 11:28 -0500, leftyfb wrote:
> >> -----BEGIN PGP SIGNED MESSAGE-----
> >> Hash: SHA1
> >>
> >> OpenPGP Security Info
> >>
> >> Error - signature verification failed
> >>
> >> gpg command line and output:
> >> /usr/bin/gpg --charset utf8  --batch --no-tty --status-fd 2 --verify
> >> gpg: Signature made Wed 20 Feb 2008 11:23:30 AM EST using DSA key ID
> >> 2926DE3E
> >> gpg: BAD signature from "Caleb Marcus <caleb.marcus at gmail.com <mailto:caleb.marcus at gmail.com>>"
> >>
> >> - -----------------
> >>
> >> I sync'd with 2 different keyservers just now and yours hasn't been updated.
> >>
> >> gpg: key 2926DE3E: "Caleb Marcus <caleb.marcus at gmail.com <mailto:caleb.marcus at gmail.com>>" not changed
> >>
> >> Caleb Marcus wrote:
> >> > According to leftyfb, my messages are showing up as invalid... can
> >> > anyone confirm/deny this?
> >> > 
> >> -----BEGIN PGP SIGNATURE-----
> >> Version: GnuPG v1.4.6 (GNU/Linux)
> >> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> >>
> >> iQEVAwUBR7xVEO6Yy60Eea9+AQJgDQf/WgbYjY/8b5J69CZmcnjnmAFqlT95tt8T
> >> P0zWQ7f0h2gYVRJO1XISzV2Fm6tLJORsJuT+e2OQxen08Vi2VtqgeX5+egFQXOdJ
> >> 3xOl+s2HBFMCtNNyz4K8WJHGFkWjn+rzkFfiowlTqmIxhw5X1CwcjzeuGAp4wg3K
> >> zBoSC4J79VwbD6qUJEzVisJ9+JLHxvhimQTN35Lpktvmtxh8mhipNry087Hi6DHw
> >> V7dBfJkriZspBiUBoFUiTB+r7VzVXEYRn2PyVBisJsQFV0VhDZlcWDqDlj6TEzhQ
> >> L0Ktg3Advzm+7lZIOd3Jk31NX10bvVaoMiXBzxPBLJZ09CuR/QJHBg==
> >> =Bxmb
> >> -----END PGP SIGNATURE-----
> >>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iQEVAwUBR7xjyu6Yy60Eea9+AQLQrwgAmZBkmofOUQAQZ/osLvE4xWMWiJFrM7Vp
> QUdW8SKsOMIAOexn1ernqW86PKgX/7DAzLQhIL830HyUgwGpnk2tRA9SJBW4idGL
> CFB98ejS8cZzmfDEw2Y6AgJ7PsGwveK3FH9wnpHa1hSR34MwzDG9GUiKD1UsIxL6
> aqwWfwXQYP7ucuq62iTMCVbq31sjUZB7aBLfPxQdJljbbbWO54RfhjdMGuP/cMoW
> Cs0Xoe9eW3tu2DRYDs2d42fRbY6e3FMcoEuHZBcpqwGrcTeLzoDlfjJpn7kFW5uo
> vWglF/O9XR97CHLBcoBCSzhdx0QKL9hmPDvAQ5b0+niGRqD9rxIc0Q==
> =MLr0
> -----END PGP SIGNATURE-----
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.ubuntu.com/archives/ubuntu-us-ma/attachments/20080220/e87d0ac9/attachment.htm 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : https://lists.ubuntu.com/archives/ubuntu-us-ma/attachments/20080220/e87d0ac9/attachment.pgp 


More information about the Ubuntu-us-ma mailing list