Hi, folks. I've been quite concerned about Open Source and the recent FSF compromise. I realize that FSF does not seem to have rsync, but prudence would dictate that I check other sources as well. Could someone please e-mail the public key for rsync to the list or to me directly? rsync-2.5.6.tar.gz rsync-2.5.6.tar.gz.sig I seem to be having a spot of trouble getting to any public key servers from my current location, and the files provided (as above) on the Samba ftp site don't seem to be adequate by themselves: $ gpg --verify ./rsync-2.5.6.tar.gz.sig ./rsync-2.5.6.tar.gz gpg: Signature made Tue Jan 28 00:41:02 2003 EST using DSA key ID 189C0E94 gpg: Can't check signature: public key not found Thanks, A. Daniel King, System Analyst HP-UX, Linux, Solaris
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 King, Daniel wrote: |I seem to be having a spot of trouble getting to any public key servers from |my current location, and the files provided (as above) on the Samba ftp site |don't seem to be adequate by themselves: The is no big security in checking with an untrusted key... but anyway you can retrieve it on a "web keyserver" like this: http://keyserver.kjsl.com:11371/pks/lookup?op=vindex&fingerprint=on&search=0x189C0E94 If you have "port 80 only" web accessm use this: (but *only* if you have problems with the other URL) http://keyserver.kjsl.com/~jharris/skylane/pks-commands.php?docmd=lookup&op=vindex&search=0x189C0E94&fingerprint=on&exact=on |$ gpg --verify ./rsync-2.5.6.tar.gz.sig ./rsync-2.5.6.tar.gz |gpg: Signature made Tue Jan 28 00:41:02 2003 EST using DSA key ID 189C0E94 |gpg: Can't check signature: public key not found Did you configure keyservers in GPG options file, did you? (or else you can use "--keyserver keyserver.kjsl.com" on the command line) - -- Lapo 'Raist' Luchini lapo@lapo.it (PGP & X.509 keys available) http://www.lapo.it (ICQ UIN: 529796) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (Cygwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAj9VLLgACgkQaJiCLMjyUvvO/wCdHqW9hjAxD/EmYDDyNe9XJp4k oY8AoNhkj7fVoENisY3WGbwTMDlf0gZm =S+vD -----END PGP SIGNATURE-----