setup-x86.exe BAD signature from "Cygwin <cygwin@cygwin.com>"

setup-x86.exe BAD signature from "Cygwin <cygwin@cygwin.com>"

[Thomas Sanders]

Am I doing something wrong here?

gpg --verify setup-x86.exe.sig setup-x86.exe

gpg: Signature made Fri 09 Sep 2016 02:20:02 AM PDT using DSA key ID 676041BA
gpg: BAD signature from "Cygwin <cygwin@cygwin.com>"

If I am not doing something wrong, this has been going on for a few weeks.
Please advise either way.
Thanks!

 -- 
Thomas Sanders | Sr. Network Systems Administrator
TrellisWare Technologies, Inc.

Office/FAX: 858-753-1654 | Mobile: 619-512-3311


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: setup-x86.exe BAD signature from "Cygwin <cygwin@cygwin.com>"

[Lee]

On 10/17/16, Thomas Sanders wrote:
> Am I doing something wrong here?
>
> gpg --verify setup-x86.exe.sig setup-x86.exe
>
> gpg: Signature made Fri 09 Sep 2016 02:20:02 AM PDT using DSA key ID
> 676041BA
> gpg: BAD signature from "Cygwin <cygwin@cygwin.com>"
>
> If I am not doing something wrong, this has been going on for a few weeks.
> Please advise either way.

works for me
$ gpg --verify cygwinSetup-x86.exe.sig cygwinSetup-x86.exe
gpg: WARNING: using insecure memory!
gpg: please see http://www.gnupg.org/documentation/faqs.html for more
information
gpg: Signature made Fri Sep  9 05:20:02 2016 EDT using DSA key ID 676041BA
gpg: Good signature from "Cygwin <cygwin@cygwin.com>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 1169 DF9F 2273 4F74 3AA5  9232 A9A2 62FF 6760 41BA

have you tried downloading from both home & work?  to different machines?

Lee

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: setup-x86.exe BAD signature from "Cygwin <cygwin@cygwin.com>"

[Brian Inglis]

On 2016-10-17 14:20, Thomas Sanders wrote:
> Am I doing something wrong here?
> gpg --verify setup-x86.exe.sig setup-x86.exe
> gpg: Signature made Fri 09 Sep 2016 02:20:02 AM PDT using DSA key ID 676041BA
> gpg: BAD signature from "Cygwin <cygwin@cygwin.com>"
> If I am not doing something wrong, this has been going on for a few weeks.
> Please advise either way.
> Thanks!

Try:
$ gpg --recv-keys 676041BA
$ gpg --edit-key 676041BA
gpg> trust
pub  1024D/676041BA  created: 2008-06-13  expires: never       usage: SC
                      trust: ultimate      validity: ultimate
sub  1024g/A1DB7B5C  created: 2008-06-13  expires: never       usage: E
[ultimate] (1). Cygwin <cygwin@cygwin.com>

Please decide how far you trust this user to correctly verify other users' keys
(by looking at passports, checking fingerprints from different sources, etc.)

   1 = I don't know or won't say
   2 = I do NOT trust
   3 = I trust marginally
   4 = I trust fully
   5 = I trust ultimately
   m = back to the main menu

Your decision? 5
Do you really want to set this key to ultimate trust? (y/N) y

pub  1024D/676041BA  created: 2008-06-13  expires: never       usage: SC
                      trust: ultimate      validity: ultimate
sub  1024g/A1DB7B5C  created: 2008-06-13  expires: never       usage: E
[ultimate] (1). Cygwin <cygwin@cygwin.com>

gpg> q

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: setup-x86.exe BAD signature from "Cygwin <cygwin@cygwin.com>"

[Brian Inglis]

On 2016-10-17 14:20, Thomas Sanders wrote:
> Am I doing something wrong here?
> gpg --verify setup-x86.exe.sig setup-x86.exe
> gpg: Signature made Fri 09 Sep 2016 02:20:02 AM PDT using DSA key ID 676041BA
> gpg: BAD signature from "Cygwin <cygwin@cygwin.com>"
> If I am not doing something wrong, this has been going on for a few weeks.
> Please advise either way.
> Thanks!

Try:
$ gpg --recv-keys 676041BA
$ gpg --edit-key 676041BA
gpg> trust
pub  1024D/676041BA  created: 2008-06-13  expires: never       usage: SC
                      trust: ultimate      validity: ultimate
sub  1024g/A1DB7B5C  created: 2008-06-13  expires: never       usage: E
[ultimate] (1). Cygwin <cygwin@cygwin.com>

Please decide how far you trust this user to correctly verify other users' keys
(by looking at passports, checking fingerprints from different sources, etc.)

   1 = I don't know or won't say
   2 = I do NOT trust
   3 = I trust marginally
   4 = I trust fully
   5 = I trust ultimately
   m = back to the main menu

Your decision? 5
Do you really want to set this key to ultimate trust? (y/N) y

pub  1024D/676041BA  created: 2008-06-13  expires: never       usage: SC
                      trust: ultimate      validity: ultimate
sub  1024g/A1DB7B5C  created: 2008-06-13  expires: never       usage: E
[ultimate] (1). Cygwin <cygwin@cygwin.com>

gpg> q

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple