Signatures ...

[Wayne Davison]

On Wed, Jun 16, 2004 at 04:35:39PM -0400, King, Daniel wrote:
> Could you tell me what I am doing wrong with this signature?

You need to fetch the key so gpg can check the signature (I signed the
file, not Dave).  The key is available through the public keyserver
network.  One way to get it is to do a manual key receive:

gpg --keyserver=x-hkp://pgp.mit.edu --recv-keys 4B96A8C5

Another is to configure gpg to do automatic key retrievals by adding
these lines to its config file (substitute whatever keyserver you like):

keyserver x-hkp://pgp.mit.edu
keyserver-options auto-key-retrieve

Then it would automatically fetch the key when you do the gpg --verify.

Finally, if you need to get the key to a system that is not on the
Internet, you can grab a copy of the key via a webbrowser by fetching
this URL:

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x4B96A8C5

... and then transport the returned text to the appropriate system and
import it via gpg.

..wayne..