PGP TarBall File Signature Keys Verification fails with no valid OpenPGP data found

openpgp
Red Cricket picture Red Cricket · Sep 23, 2013 · Viewed 47.4k times · Source

This is the first time I figured I had better check the keys of the bind software I want to install. So I downloaded what I think is a OpenPGP key ...

$ wget ftp://ftp.isc.org/isc/bind9/9.9.4/bind-9.9.4.tar.gz.sha1.asc

... then I tried to "import" this key like this ...

$ gpg --import bind-9.9.4.tar.gz.sha1.asc

... but I get this error message:

gpg: no valid OpenPGP data found.
gpg: Total number processed: 0

What am I doing wrong?

Thanks!

Answer

Andrew Prentice picture Andrew Prentice · Sep 23, 2013

The command syntax is gpg bind-9.9.4.tar.gz.sha1.asc. Of course, this gives an error that no public key is found. You can download public keys from pgpkeys.mit.edu.

This article explains the process step-by-step.

Related questions

How to display gpg key details without importing it?

I have a copy of the postgresql apt repository gpg key and would like to view the details of the gpg key as it comes in the file. Is this possible without importing it into a key ring?

Read More
How do I verify a gpg signature matches a public key file?

I know how to use gpg verify like this: $ gpg --verify somefile.sig gpg: Signature made Tue 23 Jul 2013 13:20:02 BST using RSA key ID E1B768A0 gpg: Good signature from "Richard W.M. Jones <[email protected]>" gpg: …

Read More
Encrypt files using PGP in PHP?

I want to use PGP encryption to encrypt a CSV files, I am generating through a PHP script and then send that file to client via email. Client will give me the encryption key, which I need to use for …

Read More