我正在尝试理解以下两个 serverfault 帖子:
和
就我而言,我的做法是:
$ wget http://www.chronox.de/libkcapi/libkcapi-1.1.5.tar.xz
$ wget http://www.chronox.de/libkcapi/libkcapi-1.1.5.tar.xz.asc
$ gpg libkcapi-1.1.5.tar.xz.asc
gpg: WARNING: no command supplied. Trying to guess what you mean ...
gpg: assuming signed data in 'libkcapi-1.1.5.tar.xz'
gpg: Signature made Wed 31 Jul 2019 10:01:53 AM CEST
gpg: using RSA key 3BCC43D4D2C87D1784B69EE4421EE936326AC15B
gpg: Can't check signature: No public key
$ gpg --recv-keys 3BCC43D4D2C87D1784B69EE4421EE936326AC15B
gpg: key 421EE936326AC15B: new key but contains no user ID - skipped
gpg: Total number processed: 1
gpg: w/o user IDs: 1
看来这个密钥有问题,所以我无法验证 tarball,仍然是同样的问题:
$ gpg libkcapi-1.1.5.tar.xz.asc
gpg: WARNING: no command supplied. Trying to guess what you mean ...
gpg: assuming signed data in 'libkcapi-1.1.5.tar.xz'
gpg: Signature made Wed 31 Jul 2019 10:01:53 AM CEST
gpg: using RSA key 3BCC43D4D2C87D1784B69EE4421EE936326AC15B
gpg: Can't check signature: No public key
我错过了什么?或者这个键有什么特别之处:
$ gpg --keyid-format long --show-key libkcapi-1.1.5.tar.xz.asc
gpg: no valid OpenPGP data found.
这里更新我的服务器:
$ gpg -vv --receive-keys 3BCC43D4D2C87D1784B69EE4421EE936326AC15B
gpg: data source: https://keys.openpgp.org:443
什么应该是好的/可靠的服务器?
更新2:
$ gpg --version
gpg (GnuPG) 2.2.12
libgcrypt 1.8.4
Copyright (C) 2018 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Home: /home/mathieu/.gnupg
Supported algorithms:
Pubkey: RSA, ELG, DSA, ECDH, ECDSA, EDDSA
Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH,
CAMELLIA128, CAMELLIA192, CAMELLIA256
Hash: SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
Compression: Uncompressed, ZIP, ZLIB, BZIP2
答案1
有可能您指向的是一个坏的密钥服务器?
我得到:
○ → gpg --recv-keys 3BCC43D4D2C87D1784B69EE4421EE936326AC15B
gpg: key 421EE936326AC15B: public key "Stephan Mueller <[email protected]>" imported
gpg: Total number processed: 1
gpg: imported: 1