You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cloudstack.apache.org by benoit lair <ku...@gmail.com> on 2014/07/31 17:49:59 UTC

Warning on gpg verify on apache cloudstack 4.4

Hello,

I am building acs 4.4, but when i verify the gpg keys, here is the warnign
that i got :

gpg --verify apache-cloudstack-4.4.0-src.tar.bz2.asc
gpg: Signature faite le mer. 16 juil. 2014 14:09:59 CEST avec la cl? RSA ID
AA4736F3
gpg: Bonne signature de ? Daan Hoogland <da...@apache.org> ?
gpg: ATTENTION: Cette cl? n'est pas certifi?e avec une signature de
confiance !
gpg:            Rien ne dit que la signature appartient ? son propri?taire.
Empreinte de cl? principale: 043E 4236 C0B7 CA8C C31E  0381 F9E4 0C89 AA47
36F3


Perhaps a problem with the KEYS ?

Thanks a lot.

Regards, Benoit.

Re: Warning on gpg verify on apache cloudstack 4.4

Posted by Daan Hoogland <da...@gmail.com>.
Don't trust that guy.

On Thu, Jul 31, 2014 at 6:06 PM, benoit lair <ku...@gmail.com> wrote:
> Ok, Thanks
>
>
> 2014-07-31 17:58 GMT+02:00 Sebastien Goasguen <ru...@gmail.com>:
>
>>
>> On Jul 31, 2014, at 11:51 AM, benoit lair <ku...@gmail.com> wrote:
>>
>> > But with the md5 way, no problem this looks good.
>> >
>>
>> It is just that Daan's key has not been signed by anybody else yet.
>>
>> >
>> > 2014-07-31 17:49 GMT+02:00 benoit lair <ku...@gmail.com>:
>> >
>> >> Hello,
>> >>
>> >> I am building acs 4.4, but when i verify the gpg keys, here is the
>> warnign
>> >> that i got :
>> >>
>> >> gpg --verify apache-cloudstack-4.4.0-src.tar.bz2.asc
>> >> gpg: Signature faite le mer. 16 juil. 2014 14:09:59 CEST avec la cl? RSA
>> >> ID AA4736F3
>> >> gpg: Bonne signature de ? Daan Hoogland <da...@apache.org> ?
>> >> gpg: ATTENTION: Cette cl? n'est pas certifi?e avec une signature de
>> >> confiance !
>> >> gpg:            Rien ne dit que la signature appartient ? son
>> propri?taire.
>> >> Empreinte de cl? principale: 043E 4236 C0B7 CA8C C31E  0381 F9E4 0C89
>> AA47
>> >> 36F3
>> >>
>> >>
>> >> Perhaps a problem with the KEYS ?
>> >>
>> >> Thanks a lot.
>> >>
>> >> Regards, Benoit.
>> >>
>>
>>



-- 
Daan

Re: Warning on gpg verify on apache cloudstack 4.4

Posted by benoit lair <ku...@gmail.com>.
Ok, Thanks


2014-07-31 17:58 GMT+02:00 Sebastien Goasguen <ru...@gmail.com>:

>
> On Jul 31, 2014, at 11:51 AM, benoit lair <ku...@gmail.com> wrote:
>
> > But with the md5 way, no problem this looks good.
> >
>
> It is just that Daan's key has not been signed by anybody else yet.
>
> >
> > 2014-07-31 17:49 GMT+02:00 benoit lair <ku...@gmail.com>:
> >
> >> Hello,
> >>
> >> I am building acs 4.4, but when i verify the gpg keys, here is the
> warnign
> >> that i got :
> >>
> >> gpg --verify apache-cloudstack-4.4.0-src.tar.bz2.asc
> >> gpg: Signature faite le mer. 16 juil. 2014 14:09:59 CEST avec la cl? RSA
> >> ID AA4736F3
> >> gpg: Bonne signature de ? Daan Hoogland <da...@apache.org> ?
> >> gpg: ATTENTION: Cette cl? n'est pas certifi?e avec une signature de
> >> confiance !
> >> gpg:            Rien ne dit que la signature appartient ? son
> propri?taire.
> >> Empreinte de cl? principale: 043E 4236 C0B7 CA8C C31E  0381 F9E4 0C89
> AA47
> >> 36F3
> >>
> >>
> >> Perhaps a problem with the KEYS ?
> >>
> >> Thanks a lot.
> >>
> >> Regards, Benoit.
> >>
>
>

Re: Warning on gpg verify on apache cloudstack 4.4

Posted by Sebastien Goasguen <ru...@gmail.com>.
On Jul 31, 2014, at 11:51 AM, benoit lair <ku...@gmail.com> wrote:

> But with the md5 way, no problem this looks good.
> 

It is just that Daan's key has not been signed by anybody else yet.

> 
> 2014-07-31 17:49 GMT+02:00 benoit lair <ku...@gmail.com>:
> 
>> Hello,
>> 
>> I am building acs 4.4, but when i verify the gpg keys, here is the warnign
>> that i got :
>> 
>> gpg --verify apache-cloudstack-4.4.0-src.tar.bz2.asc
>> gpg: Signature faite le mer. 16 juil. 2014 14:09:59 CEST avec la cl? RSA
>> ID AA4736F3
>> gpg: Bonne signature de ? Daan Hoogland <da...@apache.org> ?
>> gpg: ATTENTION: Cette cl? n'est pas certifi?e avec une signature de
>> confiance !
>> gpg:            Rien ne dit que la signature appartient ? son propri?taire.
>> Empreinte de cl? principale: 043E 4236 C0B7 CA8C C31E  0381 F9E4 0C89 AA47
>> 36F3
>> 
>> 
>> Perhaps a problem with the KEYS ?
>> 
>> Thanks a lot.
>> 
>> Regards, Benoit.
>> 


Re: Warning on gpg verify on apache cloudstack 4.4

Posted by benoit lair <ku...@gmail.com>.
But with the md5 way, no problem this looks good.


2014-07-31 17:49 GMT+02:00 benoit lair <ku...@gmail.com>:

> Hello,
>
> I am building acs 4.4, but when i verify the gpg keys, here is the warnign
> that i got :
>
> gpg --verify apache-cloudstack-4.4.0-src.tar.bz2.asc
> gpg: Signature faite le mer. 16 juil. 2014 14:09:59 CEST avec la cl? RSA
> ID AA4736F3
> gpg: Bonne signature de ? Daan Hoogland <da...@apache.org> ?
> gpg: ATTENTION: Cette cl? n'est pas certifi?e avec une signature de
> confiance !
> gpg:            Rien ne dit que la signature appartient ? son propri?taire.
> Empreinte de cl? principale: 043E 4236 C0B7 CA8C C31E  0381 F9E4 0C89 AA47
> 36F3
>
>
> Perhaps a problem with the KEYS ?
>
> Thanks a lot.
>
> Regards, Benoit.
>