how to verify trisquel 7 iso using gpg

2 replies [Last post]
TheAngel
Offline
Joined: 10/13/2014

Hi,
Please can someone explain this?

I have

the
.iso
.iso.asc and
.iso.md5

If I do

gpg --verify trisquel_7.0_amd64.iso.asc trisquel_7.0_amd64.iso.md5 I get BAD SIGNATURE.

Please can you help?

Thnaks you.

onpon4
Offline
Joined: 05/30/2012

The signature file and md5sum file are both for the disc image. The signature isn't for the md5sum. Also, you don't need to tell GnuPG what file it's for; it figures that out from the filename.

But I suspect your actual problem is that you don't have a copy of Ruben's public key. You'll need to obtain a copy of that and import it to your keyring with gpg --import.

Legimet
Offline
Joined: 12/10/2013

Try removing the .md5 from the second file in your command, I believe the signature is for the iso, not the .md5 file.