Quantcast
Channel: Debian User Forums
Viewing all articles
Browse latest Browse all 3260

Beginners Questions • Confused about ISO verification process

$
0
0
Hello,
I want to install older Debian 11.x but when I check the signature of checksum file using command:

Code:

gpg --verify SHA256SUMS.sign SHA256SUMS
I get this:

Code:

gpg: Signature made So 29. jún 2024, 22:46:23 CESTgpg:                using RSA key DF9B9C49EAA9298432589D76DA87E80D6294BE9Bgpg: Can't check signature: No public key
Why does it not show something like "signed by Debian..."
I have imported some public key from Debian and it's fingerprint is:

Code:

4D14 0506 53A4 02D7 3687  049D 2404 C954 6E14 5360
So it is different fingerprint then above signed checksum file has. Is it because I am checking old Debian version and my imported key is for verifying only new Debian versions? Would not it be more practical, if they use same public key for many years for many versions?

Statistics: Posted by stimulus — 2024-07-03 19:07 — Replies 1 — Views 41



Viewing all articles
Browse latest Browse all 3260

Trending Articles