Page 1 of 1

Mageia signature verification failure

PostPosted: Dec 25th, '23, 10:57
by flink
When I try to verify the Mageia 9 ISO DVD signature, then I get this error:

gpg: not a detached signature

Code: Select all
[franz@franz-820 LINUX]$ gpg --verify Mageia-9-Live-GNOME-x86_64.iso.sha512.gpg Mageia-9-Live-GNOME-x86_64.iso.sha512
gpg: WARNING: unsafe permissions on homedir '/home/franz/.gnupg'
gpg: not a detached signature
[franz@franz-820 LINUX]$ chown -R $(whoami) ~/.gnupg/
[franz@franz-820 LINUX]$ chmod 600 ~/.gnupg/*
[franz@franz-820 LINUX]$ chmod 700 ~/.gnupg
[franz@franz-820 LINUX]$ gpg --verify Mageia-9-Live-GNOME-x86_64.iso.sha512.gpg Mageia-9-Live-GNOME-x86_64.iso.sha512
gpg: not a detached signature
[franz@franz-820 LINUX]$  md5sum -c Mageia-9-Live-GNOME-x86_64.iso.md5
Mageia-9-Live-GNOME-x86_64.iso: OK
[franz@franz-820 LINUX]$ sha512sum -c Mageia-9-Live-GNOME-x86_64.iso.sha512
 sha3-512sum -c Mageia-9-Live-GNOME-x86_64.iso.sha3
Mageia-9-Live-GNOME-x86_64.iso: OK
[franz@franz-820 LINUX]$  sha3-512sum -c Mageia-9-Live-GNOME-x86_64.iso.sha3
bash: sha3-512sum: command not found
[franz@franz-820 LINUX]$ gpg --keyserver keyserver.ubuntu.com --recv-keys EDCA7A90
gpg: key 835E41F4EDCA7A90: "Mageia Release <release@mageia.org>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
[franz@franz-820 LINUX]$ gpg --verify Mageia-9-Live-GNOME-x86_64.iso.sha512.gpg Mageia-9-Live-GNOME-x86_64.iso.sha512
gpg: not a detached signature

Re: Mageia signature verification failure

PostPosted: Dec 26th, '23, 00:36
by doktor5000
You may want to read https://superuser.com/questions/1579649 ... -signature
gpg --verify on the .gpg file works just fine.