[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: AM Report for Mark Purcell



On Sun, 11 Mar 2001, Jordi Mallach wrote:

> Hello,
> 
> Identification
> --------------
> Mark got a signature from one Debian developer, Drake Diedrich:
> 
> pub  1024D/3D08B612 2001-01-14 Mark Purcell <mark@purcell.aaa.net.au>
> sig        3D08B612 2001-01-14  Mark Purcell <mark@purcell.aaa.net.au>
> sig        154B8A6D 2001-03-11  Drake Diedrich <Drake.Diedrich@anu.edu.au>
> sub  1024g/54195C3E 2001-01-14
> sig        3D08B612 2001-01-14  Mark Purcell <mark@purcell.aaa.net.au>

Please use --check-sigs rather than --list-sigs to verify signatures!


| weasel@nautilus:~$ gpg --list-sigs 94c09c7f
| pub  1024D/94C09C7F 1999-11-10 Peter Palfrader
| sig        94C09C7F 2000-02-29  Peter Palfrader
| sig        AAD2710D 2000-07-03  Henning Heinold <heinold@physik.tu-cottbus.de>

everthing looks fine, doesn't it?


| weasel@nautilus:~$ gpg --check-sigs 94c09c7f
| pub  1024D/94C09C7F 1999-11-10 Peter Palfrader
| sig!       94C09C7F 2000-02-29  Peter Palfrader
     ^ good signature
| sig-       AAD2710D 2000-07-03  Henning Heinold <heinold@physik.tu-cottbus.de>
     ^ invalid signature (this could be a faked entry[1])


					yours,
					peter

 1. In reality it was caused by a gnupg (<1.0.2) bug wrt El Gamal only keys. If you
    use --emulate-md-encode-bug it will verify nicely.
-- 
 PGP signed and encrypted  |  .''`.  ** Debian GNU/Linux **
    messages preferred.    | : :' :    By professionals,
                           | `. `'      for professionals
 http://www.palfrader.org/ |   `-    http://www.debian.org/



Reply to: