<html>
<head>
<base href="https://bugs.documentfoundation.org/">
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_REOPENED "
title="REOPENED - Public key for verifying signature of AppImage packages not uploaded to key server(s) !"
href="https://bugs.documentfoundation.org/show_bug.cgi?id=125780#c7">Comment # 7</a>
on <a class="bz_bug_link
bz_status_REOPENED "
title="REOPENED - Public key for verifying signature of AppImage packages not uploaded to key server(s) !"
href="https://bugs.documentfoundation.org/show_bug.cgi?id=125780">bug 125780</a>
from <span class="vcard"><a class="email" href="mailto:rapettif@gmail.com" title="Fernando <rapettif@gmail.com>"> <span class="fn">Fernando</span></a>
</span></b>
<pre>I searched for the key with:
$ gpg2 --keyserver hkp://keys.gnupg.net --search-keys D4761B78E365B53D
gpg: data source: <a href="http://192.146.137.140:11371">http://192.146.137.140:11371</a>
(1) Antonio Faccioli (LibreOffice AppImage Package) <antonio.faccioli@libr
2048 bit RSA key D4761B78E365B53D, creado: 2017-06-17
Keys 1-1 of 1 for "D4761B78E365B53D". Introduzca número(s), O)tro, o F)in > 1
gpg: clave D4761B78E365B53D: clave pública "Antonio Faccioli (LibreOffice
AppImage Package) <<a href="mailto:antonio.faccioli@libreoffice.org">antonio.faccioli@libreoffice.org</a>>" importada
gpg: Cantidad total procesada: 1
gpg: importadas: 1
(i imported it)
(i had to search that way, because if i search for libreoffice.org there is a
LOT of entries)
then:
$ gpg2 --verify LibreOffice-still.standard-x86_64.AppImage.asc
gpg: asumiendo que los datos firmados están en
'LibreOffice-still.standard-x86_64.AppImage'
gpg: Firmado el mié 06 may 2020 09:13:32 -03
gpg: usando RSA clave D4761B78E365B53D
gpg: Firma correcta de "Antonio Faccioli (LibreOffice AppImage Package)
<<a href="mailto:antonio.faccioli@libreoffice.org">antonio.faccioli@libreoffice.org</a>>" [desconocido]
gpg: ATENCIÓN: ¡Esta clave no está certificada por una firma de confianza!
gpg: No hay indicios de que la firma pertenezca al propietario.
Huellas dactilares de la clave primaria: DA5E 52F8 C6C9 DC6F 1473 E903 D476
1B78 E365 B53D
I don't know much about gpg2, but shouldn't the following command:
$ gpg2 LibreOffice-still.standard-x86_64.AppImage.asc
be supposed to find the key by it's own, with no warnings whatsoever?</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>