URL: <http://savannah.gnu.org/bugs/?23510>
Summary: gpg signing subkey for release 4.4.0 not cross-certified Project: findutils Submitted by: cfr Submitted on: Saturday 07/06/08 at 00:07 Category: None Severity: 3 - Normal Item Group: None Status: None Privacy: Public Assigned to: None Originator Name: cfr Originator Email: Open/Closed: Open Discussion Lock: Any Release: 4.4.0 Fixed Release: None _______________________________________________________ Details: The command: gpg --verify findutils-4.4.0.tar.gz.sig yields the following error: gpg: Signature made Sat Mar 15 12:55:50 2008 GMT using DSA key ID 13141C36 gpg: WARNING: signing subkey 13141C36 is not cross-certified gpg: please see http://www.gnupg.org/faq/subkey-cross-certify.html for more information gpg: Can't check signature: general error The gpg page referenced by this error indicates that I should refer the key's owner there and ask that cross-certification be added (using at least version 1.4.3 of gpg) and the key redistributed. If I've misunderstood something and this is my fault, I apologise in advance. I barely understand even the little gpg I use. But after trying various things, including updating all my keys and downloading the keyring from here and elsewhere, I started to think that this might be a problem with the key and not just a matter of my ignorance. Thanks, cfr _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/bugs/?23510> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/