Baxi wrote:
Hi. I am trying to package a program. The upstream provided
sha256sum.asc file. Verifying tarball with that signature says, Can't check signature:
No public key. I found his public key in key directory by searching his email and added
that key. Now gpg says Bad signature from that person. Also upstream didn't provide
gpg keyring in his project. What should I do?
Please post URLs to the files so I can see what kind of signatures or
checksums they actually contain.
Björn Persson