[Geany-Users] VerifyingDownloadedGeanyAndPlugins

[Geoff Kaniuk]

I certainly thought I had, as I am able to connect to remote servers - 
but clearly that seems to be irrelevant here.

I have spent some time looking for a step by step guide  on how to use 
gpg to verify downloaded software. I confess that I did not realise I 
needed to set up a local keyserver.

I have a $HOME/.gnupg which was created yesterday with mainly new files 
created but one old empty directory private-keys-v1.d

The command ~$ gpg --list-keys produced 3 uid from Colomban Wendling, 
all expired.

The command ~$ gpg --list-sigs again produced 3 items for Colomban 
Wendling all expired with dates set to 2015-03-12.

I can of course supply full details if that is of interest.

What I would really appreciate is some direction where to look to find a 
simple guide to configuring my gpg to verify files from Geany.

Geoff

33 Ashbury Close, Cambridge CB1 3RW 01223 710582

On 20/08/2020 23:32, Lex Trotman wrote:
> I'm not a gpg expert, but have you got your keyserver set up right?
> 
> Cheers
> Lex
> 
> On Fri, 21 Aug 2020 at 06:15, Geoff Kaniuk <geoff at kaniuk.co.uk> wrote:
>>
>> I am planning on building Geany 1.36 following my upgrade to Debian
>> buster.  I have downloaded the source file tarballs fron geany.org and
>> plugins.geany.org.
>>
>> The instruction for importing the geany-plugins key produced:
>> ~$ gpg --recv-keys B507ACD04BA283C9
>> gpg: keybox '/home/geoff/.gnupg/pubring.kbx' created
>> gpg: key B507ACD04BA283C9: new key but contains no user ID - skipped
>> gpg: Total number processed: 1
>> gpg:           w/o user IDs: 1
>>
>> Importing the key for geany gave a similar result:
>> ~$ gpg --import < colombanw-pubkey.txt
>> gpg: key 24CCD8550E5D1CAE: 3 signatures not checked due to missing keys
>> gpg: /home/geoff/.gnupg/trustdb.gpg: trustdb created
>> gpg: key 24CCD8550E5D1CAE: public key "Colomban Wendling
>> <ban at ban.netlib.re>" imported
>> gpg: Total number processed: 1
>> gpg:               imported: 1
>> gpg: no ultimately trusted keys found
>>
>> In the light of the above messages, I did not try the gpg --verify command.
>>
>> What should I do to proceed?
>>
>> Geoff
>>
>> 33 Ashbury Close, Cambridge CB1 3RW 01223 710582
>> _______________________________________________
>> Users mailing list
>> Users at lists.geany.org
>> https://lists.geany.org/cgi-bin/mailman/listinfo/users
> _______________________________________________
> Users mailing list
> Users at lists.geany.org
> https://lists.geany.org/cgi-bin/mailman/listinfo/users
>