After import the keys from: https://www.mediawiki.org/keys/keys.txt
This is what i got: $ gpg --verify mediawiki-1.23.0.tar.gz.sig gpg: Signature made Thu 05 Jun 2014 01:03:32 AM PDT using RSA key ID 5DC00AA7 gpg: Good signature from "Markus Glaser <[email protected]>" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 280D B784 5A1D CAC9 2BB5 A00A 946B 0256 5DC0 0AA7 On Sat, Jun 7, 2014 at 10:49 AM, Gordon Joly <[email protected]> wrote: > # gpg --list-keys mediawiki-1.23.0.tar.gz.sig > gpg: error reading key: No public key > > Should I expect this? I have been trying to verify the latest release. > > # gpg --verify mediawiki-1.22.4.tar.gz.sig > gpg: Signature made Tue 11 Mar 2014 16:01:30 GMT using RSA key ID 7F901A30 > gpg: BAD signature from "Mark A. Hershberger <[email protected]>" > > > # gpg --verify mediawiki-1.23.0.tar.gz.sig > gpg: Signature made Thu 05 Jun 2014 09:03:32 BST using RSA key ID 5DC00AA7 > gpg: Can't check signature: No public key > > > > Regards, > > Gordo > > > _______________________________________________ > MediaWiki-l mailing list > [email protected] > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l -- []'s Camponez _______________________________________________ MediaWiki-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
