[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: gpg: BAD signature from "Debian CD signing key <debian-cd@lists.debian.org>"

On mar., 2016-04-05 at 17:27 +0300, Михаил Черенков wrote:
>  Hello, sirs.
> $ ls
> debian-8.4.0-amd64-DVD-1.iso    debian-8.4.0-amd64-DVD-1.template 
> MD5SUMS       SHA1SUMS       SHA256SUMS       SHA512SUMS
> debian-8.4.0-amd64-DVD-1.jigdo  jigdo-file-cache.db               
> MD5SUMS.sign  SHA1SUMS.sign  SHA256SUMS.sign  SHA512SUMS.sign
> $ gpg  --keyserver keyring.debian.org --recv-keys 6294BE9B
> gpg: requesting key 6294BE9B from hkp server keyring.debian.org
> gpg: /home/user/.gnupg/trustdb.gpg: trustdb created
> gpg: key 6294BE9B: public key "Debian CD signing key <debian-cd@lists.debian
> .org>" imported
> gpg: no ultimately trusted keys found
> gpg: Total number processed: 1
> gpg:               imported: 1  (RSA: 1)
> $ gpg --verify -v *.sign
> gpg: armor header: Version: GnuPG v1
> gpg: Signature made Sun 03 Apr 2016 10:27:07 AM UTC using RSA key ID
> 6294BE9B
> gpg: using PGP trust model
> gpg: BAD signature from "Debian CD signing key <debian-cd@lists.debian.org>"
> gpg: binary signature, digest algorithm SHA256
> $ 
> Something wrong?
> What I should to do?

I think contacting the debian-cd list as indicated in the key would be the
most sensible thing to do. Also provide the URL where you downloaded the isos,
and maybe the checksums, and also which file has the problem.


Attachment: signature.asc
Description: This is a digitally signed message part

Reply to: