[squid-users] Can't verify the signature of squid-6.7.tar.gz

[Miha Miha]

Hi Francesco,

I still get an issue, although a slightly different one:

#gpg --verify squid-6.7.tar.gz.asc squid-6.7.tar.gz
gpg: Signature made Tue 06 Feb 2024 10:51:28 PM EET using ? key ID FEF6E865
gpg: Can't check signature: Invalid public key algorithm

When I try to import the public keys (pgp.asc file) I see:

#gpg --import pgp.asc

...
gpg: key FEF6E865: no valid user IDs
gpg: this may be caused by a missing self-signature
...

All the rest keys have an user and e-mail.

When I list the imported pub keys with   gpg --list-keys I see
multiple keys, but not the FEF6E865

May be the pub key hasn't been properly imported?

Regards,
Mihail

On Wed, Feb 7, 2024 at 12:55 AM Francesco Chemolli <gkinkie at gmail.com> wrote:
>
> Hi,
>   apologies, that's on me, I had uploaded the wrong version of a file. It should be okay now, can you recheck?
>
>
> On Tue, 6 Feb 2024 at 21:18, Miha Miha <misho.98118 at gmail.com> wrote:
>>
>> Hi there,
>>
>> When I try to verify the authenticity of squid-6.7.tar.gz file I get:
>>
>> gpg: Signature made Sun 04 Feb 2024 08:22:04 PM EET using RSA key ID F48F8EAB
>> gpg: Can't check signature: No public key
>>
>> I don't see a key with ID F48F8EAB in the public chain in pgp.asc file
>> Could you please double check?
>>
>> Regards,
>> Mihail
>> _______________________________________________
>> squid-users mailing list
>> squid-users at lists.squid-cache.org
>> https://lists.squid-cache.org/listinfo/squid-users