Opened 8 years ago

Closed 8 years ago

#50429 closed defect (worksforme)

unable to verify signature of MacPorts-2.3.4 download

Reported by: pigdog@… Owned by: macports-tickets@…
Priority: Normal Milestone:
Component: base Version: 2.3.4
Keywords: Cc: jmroot (Joshua Root)
Port:

Description (last modified by ryandesign (Ryan Carsten Schmidt))

I downloaded MacPorts this morning. There was no checksum provided, but a gpg signature. The gpg --verify check failed: 

  ro@peanut:/tmp$ gpg --verify MacPorts-2.3.4-10.11-ElCapitan.pkg.asc MacPorts-2.3.4-10.11-ElCapitan.pkg
  gpg: Signature made Thu 01 Oct 2015 03:53:54 PM EDT using DSA key ID B4AAE6CD
  gpg: Can't check signature: public key not found

Can an md5sum or a passing gpg check be provided?

Thanks, Rohit

Change History (3)

comment:1 Changed 8 years ago by pigdog@…

I found the ​https://distfiles.macports.org/MacPorts/MacPorts-2.3.4.chk.txt file and was able to verify the md5sum. Still the gpg check should be able to pass.

comment:2 Changed 8 years ago by ryandesign (Ryan Carsten Schmidt)

Cc: jmr@… added
Component: ports → base
Description: modified (diff)

comment:3 Changed 8 years ago by jmroot (Joshua Root)

Resolution: → worksforme
Status: new → closed

The key is on the keyservers: ​http://wwwkeys.pgp.net/pks/lookup?search=jmr%40macports.org&op=index

and also attached to my wiki page: wiki:jmr

Note: See TracTickets for help on using tickets.