Skip to content

Instantly share code, notes, and snippets.

@frntn
Created April 3, 2018 14:56
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save frntn/64df01b8e43a5fb046380982235a7a16 to your computer and use it in GitHub Desktop.
Save frntn/64df01b8e43a5fb046380982235a7a16 to your computer and use it in GitHub Desktop.
Missing Pubkey in QubesOS secpack
$ git clone https://github.com/QubesOS/qubes-secpack.git
$ cd qubes-secpack
$ gpg --import keys/*/*
gpg: key C37BB66B: public key "Joanna Rutkowska (Qubes OS signing key) <joanna@invisiblethingslab.com>" imported
gpg: key 1E30A75D: public key "Joanna Rutkowska (Qubes OS signing key) <joanna@invisiblethingslab.com>" imported
gpg: key 74EADABC: public key "Joanna Rutkowska (Qubes OS signing key) <joanna@invisiblethingslab.com>" imported
gpg: key 65EF29CA: public key "Joanna Rutkowska (Qubes OS Signing Key) <joanna@invisiblethingslab.com>" imported
gpg: key 34898310: public key "Joanna Rutkowska (Qubes OS Signing Key) <joanna@invisiblethingslab.com>" imported
gpg: key B298547C: public key "Marek Marczykowski (Qubes OS signing key) <marmarek@mimuw.edu.pl>" imported
gpg: key AB5EEF90: public key "Marek Marczykowski (Qubes OS signing key) <marmarek@invisiblethingslab.com>" imported
gpg: key A603BCB6: public key "Marek Marczykowski (Qubes OS signing key) <marmarek@invisiblethingslab.com>" imported
gpg: key 42CFA724: public key "Marek Marczykowski-Górecki (Qubes OS signing key) <marmarek@invisiblethingslab.com>" imported
gpg: key 4C85173A: public key "Rafał Wojdyła (Qubes OS signing key) <omeg@invisiblethingslab.com>" imported
gpg: key F2CD312B: public key "Wojtek Porczyk (Qubes OS signing key) <woju@invisiblethingslab.com>" imported
gpg: key 2A019A17: public key "Andrew David Wong (Qubes Documentation Signing Key)" imported
gpg: key 2FBC07A9: public key "Brennan Novak (Qubes Website & Documentation Signing) <bnvk@invisiblethingslab.com>" imported
gpg: key CA74A5C3: public key "Joanna Rutkowska (Qubes Documentation Signing Key) <joanna@invisiblethingslab.com>" imported
gpg: key 9684938A: public key "Marek Marczykowski-Górecki (Qubes Documentation Signing Key) <marmarek@invisiblethingslab.com>" imported
gpg: key 09DAFB92: public key "Hakisho Nukama (Qubes Documentation Signing Key)" imported
gpg: key 95B71262: public key "unman (Qubes Documentation Signing Key) <unman@thirdeyesecurity.org>" imported
gpg: key D272F2A8: public key "Wojtek Porczyk (Qubes OS documentation signing key) <woju@invisiblethingslab.com>" imported
gpg: key E9720C4D: public key "Zrubi (Qubes Documentation Signing Key)" imported
gpg: key 36879494: "Qubes Master Signing Key" not changed
gpg: key 211093A7: public key "Qubes OS Release 1 Signing Key" imported
gpg: key 0A40E458: public key "Qubes OS Release 2 Signing Key" imported
gpg: key 03FA5082: public key "Qubes OS Release 3 Signing Key" imported
gpg: key 9E2795E9: "Qubes OS Release 4 Signing Key" not changed
gpg: key 92C7B3DC: public key "Joanna Rutkowska (Qubes Security Pack Signing Key) <joanna@invisiblethingslab.com>" imported
gpg: key 1830E06A: public key "Marek Marczykowski-Górecki (Qubes security pack) <marmarek@invisiblethingslab.com>" imported
gpg: key 3F48CB21: public key "Qubes OS Security Team <security@qubes-os.org>" imported
gpg: Total number processed: 27
gpg: imported: 25 (RSA: 25)
gpg: unchanged: 2
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0 valid: 19 signed: 9 trust: 0-, 0q, 0n, 0m, 0f, 19u
gpg: depth: 1 valid: 9 signed: 11 trust: 8-, 0q, 0n, 0m, 1f, 0u
gpg: depth: 2 valid: 11 signed: 0 trust: 11-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2019-10-14
$ git tag -v `git describe`
object f8593b73da13de8c174e7e424b4c417e122d45d1
type commit
tag adw_f8593b73
tagger Andrew David Wong <adw@qubes-os.org> 1520384058 -0600
Tag for commit f8593b73da13de8c174e7e424b4c417e122d45d1
gpg: Signature made Wed 07 Mar 2018 01:54:18 AM CET using RSA key ID 39503030
gpg: Can't check signature: public key not found
error: could not verify the tag 'adw_f8593b73'
$ gpg --keyserver pool.sks-keyservers.net --recv-keys DB4DD3BC39503030
gpg: requesting key 39503030 from hkp server pool.sks-keyservers.net
gpg: key E9C54C53: public key "Andrew David Wong <adw@andrewdavidwong.com>" imported
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0 valid: 19 signed: 9 trust: 0-, 0q, 0n, 0m, 0f, 19u
gpg: depth: 1 valid: 9 signed: 11 trust: 8-, 0q, 0n, 0m, 1f, 0u
gpg: depth: 2 valid: 11 signed: 0 trust: 11-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2019-10-14
gpg: Total number processed: 1
gpg: imported: 1 (RSA: 1)
$ git tag -v `git describe`
object ce3a41834e0c1832eab61130d24bb31b2d550e3e
type commit
tag adw_ce3a4183
tagger Andrew David Wong <adw@qubes-os.org> 1522257971 -0500
Tag for commit ce3a41834e0c1832eab61130d24bb31b2d550e3e
gpg: Signature made Wed 28 Mar 2018 07:26:12 PM CEST using RSA key ID 39503030
gpg: Good signature from "Andrew David Wong <adw@andrewdavidwong.com>"
gpg: aka "Andrew David Wong <adw@ucsd.edu>"
gpg: aka "Andrew David Wong <adw@keybase.io>"
gpg: aka "Andrew David Wong <adw@qubes-os.org>"
gpg: aka "Andrew David Wong <adwong@wustl.edu>"
gpg: aka "Andrew David Wong <adw@invisiblethingslab.com>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: BBAF 910D 1BC9 DDF4 1043 629F BC21 1FCE E9C5 4C53
Subkey fingerprint: 650E EB09 85F4 8F78 5E9C 61F5 DB4D D3BC 3950 3030
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment