Re: lenny iso signed with key 64E6EA7D

[Steve McIntyre <steve@einval.com>]

Rob Owens wrote:
>I downloaded the latest Lenny netinst for i386.  The SHA512SUMS file is
>signed with a key id of 64E6EA7D.  However, I can't find any info on
>that key anywhere.  I tried searching public keyservers and googling for
>it, but nothing has turned up.
>
>Call me paranoid, but I never install a system unless I can verify the
>signature...
>
>Can anybody shed some light on this?

Hi Rob,

Which keyservers did you use?

$ gpg --keyserver keys.gnupg.net --recv-keys 64E6EA7D
gpg: requesting key 64E6EA7D from hkp server keys.gnupg.net
gpg: key 64E6EA7D: public key "Debian CD signing key <debian-cd@lists.debian.org>" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)

It's also on keyring.debian.org. I created the key for signing Debian
CD releases, and it's signed by a number of people including two
previous DPLs and members of the release team:

$ gpg --list-sigs 64E6EA7D
pub   4096R/64E6EA7D 2009-10-03
uid                  Debian CD signing key <debian-cd@lists.debian.org>
sig 3        64E6EA7D 2009-10-03  Debian CD signing key <debian-cd@lists.debian.org>
sig          88C7C1F7 2009-10-03  Steve McIntyre <steve@einval.com>
sig          3442684E 2009-10-03  Steve McIntyre <steve@einval.com>
sig          AFF122B0 2009-10-03  Christopher J. Walker <C.J.Walker@physics.org>
sig          29982E5A 2009-10-03  Steve Langasek <vorlon@dodds.net>
sig          68FD549F 2009-10-05  Martin Michlmayr <tbm@cyrius.com>
sig          01AA4A64 2009-10-03  Steve Langasek <steve.langasek@canonical.com>
sig          AF6C61DD 2009-10-05  Martin Michlmayr <tbm@cyrius.com>
sig          95861109 2009-10-06  Ben Hutchings (DOB: 1977-01-11)
sig          A40F862E 2009-10-09  Neil McGovern <maulkin@halon.org.uk>
sig          0125D5C0 2009-10-14  Philip Hands <phil@hands.com>

-- 
Steve McIntyre, Cambridge, UK.                                steve@einval.com
"The problem with defending the purity of the English language is that
 English is about as pure as a cribhouse whore. We don't just borrow words; on
 occasion, English has pursued other languages down alleyways to beat them
 unconscious and rifle their pockets for new vocabulary."  -- James D. Nicoll