From: Clark Dunson <cdunson@shotspotter.com>
To: "zsh-users@zsh.org" <zsh-users@zsh.org>
Subject: PGP key question
Date: Tue, 2 Oct 2018 01:21:03 +0000 [thread overview]
Message-ID: <BAC9B7B8-2F94-4B54-ACC0-38AF2E8706C4@contoso.com> (raw)
[-- Attachment #1: Type: text/plain, Size: 1796 bytes --]
On the site it says:
All files are signed with the following OpenPGP<https://en.wikipedia.org/wiki/Pretty_Good_Privacy> keys:
pub 2048R/4BDB27B3 2015-11-25
Key fingerprint = F7B2 754C 7DE2 8309 1466 1F0E A71D 9A9D 4BDB 27B3
uid Peter Stephenson <p.w.stephenson@ntlworld.com>
sub 2048R/4C58D718 2015-11-25
pub rsa3072 2013-06-11 [SC] [expires: 2020-07-01]
E96646BE08C0AF0AA0F90788A5FEEE3AC7937444
uid [ unknown] Daniel Shahaf
uid [ unknown] Daniel Shahaf
sub rsa3072 2013-06-11 [E] [expires: 2020-07-01]
sub rsa4032 2017-06-28 [S] [expires: 2020-07-01]
But I get:
~/Downloads$ gpg --verify zsh-5.6.2.tar.xz.asc zsh-5.6.2.tar.xz
gpg: Signature made Fri Sep 14 05:58:34 2018 PDT
gpg: using RSA key 6EB60B637CE5ACBF2449A2DADB27E997429AF20C
gpg: key A5FEEE3AC7937444: 26 signatures not checked due to missing keys
gpg: key A5FEEE3AC7937444: public key "Daniel Shahaf <danielsh@apache.org>" imported
gpg: marginals needed: 3 completes needed: 1 trust model: pgp
gpg: depth: 0 valid: 1 signed: 0 trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: next trustdb check due at 2022-10-02
gpg: Total number processed: 1
gpg: imported: 1
gpg: Good signature from "Daniel Shahaf <danielsh@apache.org>" [unknown]
gpg: aka "Daniel Shahaf <d.s@daniel.shahaf.name>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: E966 46BE 08C0 AF0A A0F9 0788 A5FE EE3A C793 7444
Subkey fingerprint: 6EB6 0B63 7CE5 ACBF 2449 A2DA DB27 E997 429A F20C
Is there a concern here?
Thank you!
Clark
next reply other threads:[~2018-10-02 1:21 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-10-02 1:21 Clark Dunson [this message]
2018-10-02 7:51 ` Ben Oliver
2018-10-02 8:23 ` Peter Stephenson
2018-10-02 14:15 ` Daniel Shahaf
2018-10-02 15:17 ` Clark Dunson
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=BAC9B7B8-2F94-4B54-ACC0-38AF2E8706C4@contoso.com \
--to=cdunson@shotspotter.com \
--cc=zsh-users@zsh.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.vuxu.org/mirror/zsh/
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).