Re: GPG Import/Verify fails for Privoxy v3.0.34

Hi Anthony,

My result is:

$ gpg --verify privoxy-3.0.34-stable-src.tar.gz.asc
gpg: assuming signed data in 'privoxy-3.0.34-stable-src.tar.gz'
gpg: Signature made Sat 04 Feb 2023 11:56:40 PM EST
gpg:                using RSA key 4F36C17F3816913654A1E850691822918BA2371C
gpg: Good signature from "Fabian Keil <[email protected]>" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: 4F36 C17F 3816 9136 54A1  E850 6918 2291 8BA2 371C

I don't know why in your case your gpg installation does not detect the public key. Whilst apparently the key pair has expired, you can easily independently verify that Fabian Keil is a maintainer of the Privoxy project.

Hope this helps,

Ian


On Sun, 3 Mar 2024, at 19:40, Anthony K wrote:
> Hey Ian.
>
> Apologies for the omission:
>
> I downloaded the TAR.GZ and ASC files from:
> https://www.privoxy.org/sf-download-mirror/Sources/3.0.34%20%28stable%29/
>
>
> Thanks,
> ak.
>
> On 4/3/24 07:42, Ian Silvester wrote:
>> Hi Anthony,
>>
>> Which installation package are you attempting to verify?
>>
>> Cheers,
>>
>> Ian
>>
>>
>> On Sun, 3 Mar 2024, at 13:45, Anthony K wrote:
>>> I'm in the process of installing Privoxy 3.0.34 but unable to verify.
>>>
>>> The error messages are exactly as from Jan 2017:
>>> https://lists.privoxy.org/pipermail/privoxy-users/2017-January/000158.html
>>>
>>> Would be good to get it to verify correctly before I install.
>>> _______________________________________________
>>> Privoxy-users mailing list
>>> [email protected]
>>> https://lists.privoxy.org/mailman/listinfo/privoxy-users
>> _______________________________________________
>> Privoxy-users mailing list
>> [email protected]
>> https://lists.privoxy.org/mailman/listinfo/privoxy-users
>
> _______________________________________________
> Privoxy-users mailing list
> [email protected]
> https://lists.privoxy.org/mailman/listinfo/privoxy-users