[ale] Bad signatures on keys?

Scott Castaline skotchman at gmail.com
Thu Dec 15 17:02:59 EST 2011


On 12/15/2011 04:34 PM, Scott Castaline wrote:
> On 12/15/2011 02:24 PM, Michael B. Trausch wrote:
>> I'm a bit curious, I just did another re-import and then a --check-sigs
>> and I saw this at the bottom of the output:
>>
>> 4 bad signatures
>> 1945 signatures not checked due to missing keys
>>
>> I get the missing keys bit, but the 4 bad signatures I thought was a
>> little strange, so I looked into it.  Seems that bad signatures are
>> shown with their lines starting with "sig-" instead of "sig!" in the
>> --check-sigs output.
>>
>> The four bad signatures are (output trimmed, they're all on Mike
>> Warfield's key and the list is massively huge):
>>
>> pub   1024R/DF1DD471 1994-04-28
>> uid                  Michael H. Warfield<mhw at WittsEnd.com>
>> sig-         DF1DD471 1998-04-05  Michael H. Warfield<mhw at WittsEnd.com>
>>
>> uid                  Michael H. Warfield<mhw at commandcorp.com>
>> sig-         DF1DD471 1994-04-29  Michael H. Warfield<mhw at WittsEnd.com>
>> sig-3        DF1DD471 2002-10-14  Michael H. Warfield<mhw at WittsEnd.com>
>> sig-3        5DEA789B 2011-12-09  David 
>> Tomaschik<david at systemoverlord.com>
>>
>> So, three of the bad signatures on key df1dd471 are from key df1dd471
>> and one of the bad signatures is from key 5dea789b, am I understanding
>> that correctly?
>>
>> Also, why is it that David's key shows an invalid signature for the
>> mhw at commandcorp.com uid, but not for any of the other uids on that key?
>>
>> Is there a possibility that something is funky with my
>> (brand-spanking-new!) GPG database, somehow?
>>
>>     --- Mike
>>
>>
>>
>> _______________________________________________
>> Ale mailing list
>> Ale at ale.org
>> http://mail.ale.org/mailman/listinfo/ale
>> See JOBS, ANNOUNCE and SCHOOLS lists at
>> http://mail.ale.org/mailman/listinfo
> Okay so I got curious and did a refresh (gpg --refresh) followed by 
> gpg --check-sigs and it got a little weird.
> Like:
> 135 bad signatures
> 14951 signatures not checked due to missing keys
> 1 signature not checked due to an error
> weird. So WTF did I do wrong?
> The output listed names not from our group, some that I've recognized 
> around the web but never face to face, although Tom Yu sounds very 
> familiar from several years back.
Never mind, found my oops! My fingers sometimes spaz out and the pinky 
was hitting enter before I typed the key ID. I wasn't watching the 
scrren while entering it all, I didn't realize it until after cut & 
paste from terminal to message reply. I don't know if that makes any 
sense but hey life goes on.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: skotchman.vcf
Type: text/x-vcard
Size: 181 bytes
Desc: not available
Url : http://mail.ale.org/pipermail/ale/attachments/20111215/e534bd18/attachment-0001.vcf 


More information about the Ale mailing list