Home → Stable →

Can't verify the signature of MacGPG2-2.0.16.zip (web)

• Edit

terrence.j.doyle+gpg

11 Jun, 2012 03:22 PM

After importing your OpenPGP keys from gpgtools.asc I tried verifying my download of MacGPG2-2.0.16.zip with the following:

     gpg --verify MacGPG2-2.0.16.zip.asc

This failed with the following error:

gpg: Signature made Sat Oct 30 18:48:06 2010 CDT using DSA key ID 1C91AC86
gpg: Can't check signature: No public key

I then tried to verify my download of GPG Keychain Access-0.8.13.dmg with:

     gpg --verify 'GPG Keychain Access-0.8.13.dmg.sig'

That succeeded. I suspect additional keys are needed to verify MacGPG2-2.0.16.zip.

1. Support Staff 1 Posted by Steve on 11 Jun, 2012 07:15 PM

   

   Hey Terrrence,

   any reason, why you'd wanna load the old 2.0.16 since there is a newer version?
   http://www.gpgtools.org/macgpg2/index.html
   or the even newer nightly http://nightly.gpgtools.org/?

   Also it seems the GPG Keychain Access version you are using is outdated since 1.0b7 has been out for a while: http://www.gpgtools.org/keychain/index.html

   Maybe sth went wrong with the signature. Try an up-to-date version and see if the signature verifies correctly.

   Hope this helps :)

   steve

   • Edit

2. 2 Posted by Terrence J. Doy... on 13 Jun, 2012 11:30 AM

   

   I am using these versions because the newer versions won't work on my PowerMac G5.

   I took another look at the error output in the verify of MacGPG2-2.0.16.zip. The
   failure occurs because MacGPG2-2.0.16.zip.asc uses key ID 1C91AC86, which isn't
   in gpgtools.asc. I can't find key ID 1C91AC86 with gpg --search-keys, either. It
   looks like MacGPG2-2.0.16.zip needs to be re-signed with key ID 00D026C4.

   • Edit

3. Support Staff 3 Posted by Steve on 14 Jun, 2012 11:25 AM

   

   Ah ok, that must have been an old team key.

   Good news is, while 2.0.17 had no PPC support, 2.0.19 should be PPC compatible. Would you mind giving that a shot?

   MacPGP2 2.0.19 can be found here: http://nightly.gpgtools.org/

   Please let us know how it goes.

   All the best,
   steve

   • Edit

4. 4 Posted by Terrence Doyle on 17 Jun, 2012 11:27 AM

   

   Ok, I installed MacPGP2
   2.0.19. But, I don't have much time to be dealing with untested
   software. What's the ETA on the next stable release?

   • Edit

5. Support Staff 5 Posted by Steve on 17 Jun, 2012 01:38 PM

   

   Hey Terrence,
   good question. We are a very small team working on this project in our spare time. Things get released once they are ready. Sorry we don't have ETAs. But MacGPG2 is OpenSource so feel free to work on anything you'd like to tweak.

   All the best,
   steve

   • Edit

6. 6 Posted by Terrence Doyle on 17 Jun, 2012 07:23 PM

   

   Well, I was afraid of this. The installer removed the man pages, and didn't replace them. It also removed the launch agent for gpg-agent from /Library/LaunchAgents (I wasn't sure what that was about anyway), as well as start-gpg-agent from /Applications and my login start-ups. In addition, I wanted to see what kbxutil was all about, so I typed:

    kbxutil --version
   

   That returned the following error:

    dyld: Library not loaded: /usr/local/lib/libgpg-error.0.dylib
      Referenced from: /usr/local/bin/kbxutil
      Reason: image not found
    Trace/BPT trap
   

   Sure enough, the library's not there.

   gpg-agent and kbxutil don't appear to be too important for my purposes, but is there any way I can get the man pages back?

   • Edit

7. Support Staff 7 Posted by Luke Le on 17 Jun, 2012 07:37 PM

   

   Hi Terrence,

   is there any chance you've had an older version of MacGPG or any other GPG distribution still installed?
   MacGPG 2 installs into /usr/local/MacGPG2 and only symlinks into /usr/local/bin. We no longer install kbxutil since we've removed everything which is not absolutely necessary.

   The man pages should still be there, so please check if /usr/local/MacGPG2/share/man exists and if you have a file called
   MacGPG2 in /etc/manpaths.d/ and verify that the content of this file reads
   /usr/local/MacGPG2/share/man

   Let us know what you find.

   • Edit

8. 8 Posted by Terrence Doyle on 18 Jun, 2012 05:04 AM

   

   Sorry, I totally missed that. Yes, /usr/local/MacGPG2 is there with the man pages.

   I've always just set the MANPATH environment variable in my .profile. I'll update my .profile with /usr/local/MacGPG2 now that I know about it.

   /usr/local/bin/kbxutil must be left over from release 2.0.16 of MacGPG2. That release did, in fact, put things in /usr/local/bin and /usr/local/share/man.

   • Edit

9. Support Staff 9 Posted by Steve on 18 Jun, 2012 08:41 AM

   

   Sounds good.

   The directory has been changed for several reasons. One being, that now we can deliver a clean uninstaller.

   Let us know, if you need further help or should you run into more trouble.

   All the best,
   steve

   • Edit

10. Steve closed this discussion on 10 Jul, 2012 10:52 AM.