GPG Public Keys to verify Release.gpg

[Maximilian Kolb]

Hello all!
I am trying to verify the 'Release.gpg' signature but I cannot find the correct corresponding public GPG key.
My key [ 0xD94AA3F0EFE21092 from https://help.ubuntu.com/community/VerifyIsoHowto] did not work to verify the Ubuntu 18.04 repositories.
I do not want to verify the 'SHASUMS' files for '.iso' files, but the actual Ubuntu repositories 'main', 'security', and 'updates'.

I ran 'gpg --keyid-format long --keyserver hkp://keyserver.ubuntu.com --recv-keys 0x46181433FBB75451 0xD94AA3F0EFE21092' and 'gpg --verify SHA1SUMS.gpg SHA1SUMS' just fine, but I could not use the files to verify the 'Release.gpg' file by running 'gpg --verify Release.gpg Release'.

My understanding is that Ubuntu signs the 'Release' file and puts the signature into 'Release.gpg' which can be verified with the correct public key. This is what I'm missing.

Can you please point me into the right direction? I would truely appreciate you mailing me the correct fingerprint(s) to do what I'm trying to achieve: verify the 'Release.gpg' files for Ubuntu repositories main, security, and updates for 16.04, 18.04, and 20.04.

Not to offend anyone, but my approach by combining the 'archive' and 'security archive' key for Debian 10 works just fine [https://ftp-master.debian.org/keys.html]. I am hoping for a similar solution for Ubuntu.

Thank you very much.
Kind regards
Maximilian.

Disclaimer: I sent this exact email to ubuntu-devel-discuss at lists.ubuntu.com more than a week ago but haven't gotten any responses yet.


Herzliche Grüße aus München

Maximilian Kolb
______________________________________________________
Maximilian Kolb

Technical Content Creator

E-Mail: kolb at atix.de<mailto:kolb at atix.de>


ATIX - The Linux & Open Source Company

ATIX Informationstechnologie und Consulting AG
Parkring 15
85748 Garching bei München
<http://www.atix.de/>www.atix.de<https://atix.de/>

Registergericht: Amtsgericht München, Registernummer: HRB 168930
USt.-Id.: DE209485962
Vorstand: Thomas Merz (Vors.), Mark Hlawatschek
Vorsitzender des Aufsichtsrats: Dr. Martin Buss


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20200520/6d98930a/attachment.html>