Bug 551744 – gpg --keyserver ... issue

• Product: [OLD] Docs on www.gentoo.org
• Status: RESOLVED FIXED

[Description tescas 2015-06-11 09:42:51 UTC]

hello,

1.- i am just starting with Gentoo (comming from Archlinux) ...
so, i start Gentoo from level 0 !

2.- i downloaded 

-rwxr-xr-x 1 aa users 2944650240 Aug 25  2014 livedvd-x86-amd64-32ul-20140826.iso
-rwxr-xr-x 1 aa users       1388 Aug 26  2014 livedvd-x86-amd64-32ul-20140826.iso.DIGESTS.asc

3.- i want to check ivedvd-x86-amd64-32ul-20140826.iso

according to https://wiki.gentoo.org/wiki/Handbook:X86/Installation/Media#Verifying_the_downloaded_files
i do this (...)  and have theses issues rising up :


$ gpg --recv-keys 0xBB572E0E2D182910
gpg: no keyserver known (use option --keyserver)
gpg: keyserver receive failed: Syntax error in URI

then i tried this:

$ gpg  --keyserver pool.sks-keyservers.net --recv-keys 0xBB572E0E2D182910
gpg: requesting key 2D182910 from hkp server pool.sks-keyservers.net
gpg: key 2D182910: "Gentoo Linux Release Engineering (Automated Weekly Release Key) <[e-mail]>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1

conclusion: 
? why '--keyserver pool.sks-keyservers.net' is missing in the first command ?

II. next, i did this: 
$ gpg --verify  livedvd-x86-amd64-32ul-20140826.iso.DIGESTS.asc
gpg: Signature made Tue Aug 26 21:21:56 2014 CEST using DSA key ID 17072058
gpg: Can't check signature: No public key

conclusion:
i missed something from the wiki, or ... 

thx








Reproducible: Always

Actual Results:  
Verifying the downloaded files: fails

Expected Results:  
Additionnal Comments in the wiki

[Comment 1 tescas 2015-06-11 10:14:38 UTC]

# --- 

this link 

https://www.gentoo.org/downloads/signatures/

is missing in the page 


https://wiki.gentoo.org/wiki/Handbook:X86/Installation/Media#Verifying_the_downloaded_files

[Comment 2 nm (RETIRED) 2015-06-14 03:42:09 UTC]

(In reply to tescas from comment #1)
> # --- 
> 
> this link 
> 
> https://www.gentoo.org/downloads/signatures/
> 
> is missing in the page 
> 
> 
> https://wiki.gentoo.org/wiki/Handbook:X86/Installation/
> Media#Verifying_the_downloaded_files

incorrect; that link is present right above the code example.

* * *

however, the initial bug is correct; i tested this on an arch linux box to verify the gpg error.

we need to change the --recv-keys command to match the one on the signatures page; it should look like this:

$ gpg --keyserver hkps.pool.sks-keyservers.net --recv-keys 0xBB572E0E2D182910

[Comment 3 tescas 2015-06-14 10:06:45 UTC]

subj: ... link missing ...

yess ! you're correct ! 

thx

[Comment 4 nm (RETIRED) 2016-02-06 06:59:11 UTC]

fixed. in the future, please use the "discussion" tab on each wiki page if you have any suggested changes.

[Comment 5 nm (RETIRED) 2016-02-06 07:41:49 UTC]

*** Bug 549984 has been marked as a duplicate of this bug. ***