OT: PGP newbie question

[Denis Beauchemin]

Hi,

Now I get:
$ LANG=C gpg --verify MailScanner-4.24-4.rpm.tar.gz.sig
gpg: WARNING: using insecure memory!
gpg: please see http://www.gnupg.org/faq.html for more information
gpg: Signature made Thu Oct  2 13:09:30 2003 EDT using DSA key ID 1415B654
gpg: Good signature from "Julian Field <Jules at JulianField.net>"
gpg:                 aka "Julian Field <jkf at ecs.soton.ac.uk>"
gpg:                 aka "Julian Field <Jules at Jules.fm>"
gpg:                 aka "Julian Field <jules at zepler.org>"
gpg:                 aka "Julian Field <J.K.Field at ecs.soton.ac.uk>"
gpg:                 aka "Julian Field <postmaster at ecs.soton.ac.uk>"
gpg:                 aka "Julian Field <mailscanner at ecs.soton.ac.uk>"
gpg: checking the trustdb
gpg: checking at depth 0 signed=0 ot(-/q/n/m/f/u)=0/0/0/0/0/1
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: EE81 D763 3DB0 0BFD E1DC  7222 11F6 5947 1415 B654


Is this normal?  Never mind the first warning, the doc says it is normal
as I didn't run the command as root and it is not set-uid root.

I'm concerned about the last warning... not the many aliases Julian has
registered... 8-)

Denis

Le jeu 02/10/2003 à 15:44, Julian Field a écrit :
> At 20:27 02/10/2003, you wrote:
> >Hi,
> >
> >As Julian started generating sigs for downloads, I looked into gpg to be
> >able to make something good out of this.
> >
> >I initialized the thing with gpg --gen-key, then tried to verify
> >Julian's sig but I always get this error message:
> ># LANG=C gpgv MailScanner-4.24-4.rpm.tar.gz.sig
> >gpgv: Signature made Thu Oct  2 13:09:30 2003 EDT using DSA key ID 1415B654
> >gpgv: Can't check signature: public key not found
> >
> >So I guess I should get Julian's public key (#1415B654?) but I don't
> >know where to look for it.  Digging, I found Julian's pictures of his
> >Canadian vacation (they are really nice!), but no public key...
> >
> >Could someone point me in the right direction please?
> 
> gpg --keyserver pgpkeys.mit.edu --search-keys "Julian Field"
> 
> That will fetch the keys, but I'm not quite sure what you do next. I do all
> my PGP stuff on a Windows box :-)
> --
> Julian Field
> www.MailScanner.info
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
> PGP footprint: EE81 D763 3DB0 0BFD E1DC  7222 11F6 5947 1415 B654
-- 
Denis Beauchemin, analyste
Université de Sherbrooke, S.T.I.
T: 819.821.8000x2252 F: 819.821.8045