[Bug 379] difficult to find the openssh code signing key on openssh.org.

[bugzilla-daemon at mindrot.org]

http://bugzilla.mindrot.org/show_bug.cgi?id=379





------- Additional Comments From dtucker at zip.com.au  2003-05-14 23:25 -------
Err, that's what the keyid is for:

$ gpg openssh-3.6.1p2.tar.gz.sig   
gpg: Signature made Tue Apr 29 19:40:09 2003 EST using DSA key ID 86FF9C48
gpg: Can't check signature: public key not found

$ gpg --recv-key 86FF9C48
gpg: requesting key 86FF9C48 from HKP keyserver wwwkeys.au.pgp.net
gpg: found 0 ownertrust records
gpg: migrated 0 version 2 ownertrusts
gpg: key 86FF9C48: public key imported
gpg: Total number processed: 1
gpg:               imported: 1

$ gpg openssh-3.6.1p2.tar.gz.sig 
gpg: Signature made Tue Apr 29 19:40:09 2003 EST using DSA key ID 86FF9C48
gpg: Good signature from "Damien Miller (Personal Key) <djm at mindrot.org>"
gpg: checking the trustdb
gpg: no ultimately trusted keys found
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Fingerprint: 3981 992A 1523 ABA0 79DB  FC66 CE8E CB03 86FF 9C48



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.