GPG__suite-2018.3.dmg Verification failed

foruminformationmonitor's Avatar

foruminformationmonitor

13 Sep, 2018 02:52 AM

Which of our tools is giving you problems?

GPG_suite-2018.3.dmg

Attach a screenshot of the version info for all installed components (how to: https://gpgtools.tenderapp.com/kb/faq/where-can-i-find-version-info...):

Describe your problem. Add as much detail as possible. When I attempt to verify GPG_suite-2018.3.dmg SHA256: 00a6d0c69dd050acd2df4a34bf8502d4e0de3af9b4f7523a0003af14b60006be
with signature GPG_suite-2018.3.dmg.sig SHA256: 0d78d35c9d6a1d74f506eb47e500180ee606fe5259e06ac2941b8b2d6d85be7f
The GPG signing finger print :85E3 8F69 046B 44C1 EC9F B07B 76D7 8F05 00D0 26C4

When I verify I get verification failed.

What did you expect instead

It to pass

Describe steps leading to the problem.

Double cliked on GPG_suite-2018.3.dmg.sig with GPG_suite-2018.3.dmg located in the same directory

Are you using any other Mail.app plugins?

no

  1. 1 Posted by foruminformatio... on 13 Sep, 2018 06:18 AM

    foruminformationmonitor's Avatar

    Strangely I noticed that your signature file
    https://releases.gpgtools.org/GPG_Suite-2018.3.dmg.sig

    Provides a Not available message when trying to access. but If I use DNS 198.251.50.199 and 198.251.50.200 it finds the site. Can you verify the signature sha256 value?
    The GPG key chain shows GPGtools team with 1 bar red validity

  2. 2 Posted by foruminformatio... on 13 Sep, 2018 06:30 AM

    foruminformationmonitor's Avatar

    The DNS I provided belong to my ISP Vmedia

  3. 3 Posted by foruminformatio... on 27 Sep, 2018 12:39 PM

    foruminformationmonitor's Avatar

    I have not received a response yet to my query?

  4. 4 Posted by LaVela on 27 Sep, 2018 01:01 PM

    LaVela's Avatar

    They've "killed" GPGMail unless you now pay for it. Doesn't matter if you don't upgrade; it's also disabled for all prior versions! Nice, eh?

  5. Support Staff 5 Posted by Steve on 16 Oct, 2018 10:43 AM

    Steve's Avatar

    Hi foruminformationmonitor,

    this seems to be two questions from what I understand?

    1. Verification via sig file and
    2. Verification via SHA256

    #1 worked in my test. Just to make sure you have the correct sig file I attached it to this reply

    #2 shasum256 for 2018.3 is 00a6d0c69dd050acd2df4a34bf8502d4e0de3af9b4f7523a0003af14b60006be

    Best,
    Steve

  6. 6 Posted by foruminformatio... on 17 Oct, 2018 06:26 AM

    foruminformationmonitor's Avatar

    Can you confirm the public key? My finger print starts with 85e3.. and ends with ..26c4 the name GPGtools team.

  7. Support Staff 7 Posted by Luke Le on 17 Oct, 2018 04:07 PM

    Luke Le's Avatar

    You might have to update our key from the key servers first.

  8. 8 Posted by foruminformatio... on 18 Oct, 2018 05:25 AM

    foruminformationmonitor's Avatar

    What is the best way to update my key? Is the key I provided in the case incorrect?

  9. Support Staff 9 Posted by Steve on 18 Oct, 2018 07:39 AM

    Steve's Avatar

    You can open GPG Keychain, select the team key and press ⌘U or select menubar > Key > Update from Key Server…

  10. 10 Posted by foruminformatio... on 19 Oct, 2018 07:39 PM

    foruminformationmonitor's Avatar

    That corrected the issue. the public key was out dated

  11. Support Staff 11 Posted by Steve on 19 Oct, 2018 09:21 PM

    Steve's Avatar

    Perfect. Glad, this is solved for you. I'm closing this discussion. Should you need further assistance or have questions you can re-open this discussion here or open a new one any time.

    Best,
    steve

  12. Steve closed this discussion on 19 Oct, 2018 09:21 PM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac