#357 Getting GPG error when trying to verify package

[Michael Burk]

Getting GPG error when trying to verify package.

• Observed on 2.0.19 and 2.0.22 (not tested others)
• Platform is CentOS 6.6, x86_64
• Imported keys from Niels and Nick:

  $ gpg --import pgp.key
  gpg: key 0A2F87E5: "Niels Provos (#2) <provos@openbsd.org>" not changed
  gpg: key C2009841: "Niels Provos <provos@openbsd.org>" not changed
  gpg: Total number processed: 2
  gpg:              unchanged: 2
  $ gpg --import public_key_165733EA.asc
  gpg: key 165733EA: "Nick Mathewson <nickm@alum.mit.edu>" not changed
  gpg: Total number processed: 1
  gpg:              unchanged: 1
  

When verifying file signature, get following error:

$ gpg --verify libevent-2.0.22-stable.tar.gz.asc
gpg: Signature made Mon 05 Jan 2015 08:16:20 AM MST using RSA key ID 8D29319A
gpg: WARNING: signing subkey 8D29319A is not cross-certified
gpg: please see http://www.gnupg.org/faq/subkey-cross-certify.html for more information
gpg: Can't check signature: General error

GPG version:

$ gpg --version
gpg (GnuPG) 2.0.14
libgcrypt 1.4.5
...

[Anonymous]

fixed it :)
link