Samba key signature fail

[Stefan Metzmacher]

Hi David,

Am 07.02.19 um 18:11 schrieb David Mulder via samba-technical:
>> wget https://download.samba.org/pub/samba/samba-pubkey.asc
>> gpg --import samba-pubkey.asc
> gpg: key 6F33915B6568B7EA: 13 signatures not checked due to missing keys
> gpg: key 6F33915B6568B7EA: "Samba Distribution Verification Key
> <samba-bugs at samba.org>" not changed
> gpg: Total number processed: 1
> gpg:              unchanged: 1
>> wget https://www.samba.org/ftp/pub/ldb/ldb-1.5.2.tar.gz
>> wget https://www.samba.org/ftp/pub/ldb/ldb-1.5.2.tar.asc
>> gzip -d ldb-1.5.2.tar.gz
>> gpg --verify ldb-1.5.2.tar.asc ldb-1.5.2.tar
> gpg: Signature made Tue 15 Jan 2019 03:47:18 AM MST
> gpg:                using RSA key 9147A339719518EE9011BCB54793916113084025
> gpg:                issuer "samba-bugs at samba.org"
> gpg: Can't check signature: No public key
> 
> Can somebody fix this?

The libraries are signed with a different key. See
https://git.samba.org/?p=samba.git;a=blob;f=script/release.sh#l1050

The following is the correct key:

gpg --list-keys 4793916113084025
pub   rsa2048/4793916113084025 2011-01-12 [SC] [verfällt: 2019-06-26]
      Schl.-Fingerabdruck = 9147 A339 7195 18EE 9011  BCB5 4793 9161
1308 4025
uid              [ vollständig ] Samba Library Distribution Key
<samba-bugs at samba.org>
sub   rsa2048/B1DD08BF65F64DAB 2011-01-12 [E] [verfällt: 2019-06-26]

metze

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20190207/c3c6ff3e/signature.sig>