Dev1 Galaxy Forum / [SOLVED] Devuan keyserver not available / bad signature

Re: [SOLVED] Devuan keyserver not available / bad signature

dummy@example.com (uther) — Fri, 07 Aug 2020 12:41:55 +0000

I already refreshed keys before verifying file and all are up to date (not changed). subkeys.pgp.net is timing out on me right now, will check later.

I've downloaded iso and signature directly from Devuan page: https://files.devuan.org/devuan_beowulf/desktop-live/

gpg --verify SHA256SUMS.txt.asc SHA256SUMS.txt
gpg: Signature made Sun 31 May 2020 11:34:07 PM CEST
gpg:                using RSA key 67F5013216271E85C251E480A73823D3094C5620
gpg: BAD signature from "fsmithred (aka fsr) " [unknown]

EDIT: Nevermind. I redownloaded all files and now everything is fine. Thanks.

Re: [SOLVED] Devuan keyserver not available / bad signature

dummy@example.com (fsmithred) — Fri, 07 Aug 2020 12:28:45 +0000

That's my current key and it has a good signature here. MIT's pgp is frequently down. I just tried to get my key in a web browser, and it failed to find it. Never mind that I uploaded it to pgp.mit.edu when I created it.

Try subkeys.pgp.net and try refreshing your keys. Last year I updated the expiration date on the key but it didn't get updated on the keyserver until later. (mit was down at the time)

Using --refresh-keys will update your local copy.

[SOLVED] Devuan keyserver not available / bad signature

dummy@example.com (uther) — Fri, 07 Aug 2020 12:16:30 +0000

I wanted to update keys for iso verification and got:

gpg --keyserver=pgp.mit.edu --recv-keys 094c5620
gpg: keyserver recieve failed: No keyserver available

When I try to verify Beowulf SHA256SUMS with the existing key i get bad signature from @fsmithred.

I tried on two machines with VPN+proxy on and off. Can someone check if this is only on my side? Thanks in advance.