...
First, we will check the detached signature ( fineract-0.6.0-incubating-src.tar.gz.asc
) against our release ( apache-fineract-0.6.0-incubating-src.tar.gz
).
Code Block | ||
---|---|---|
| ||
% gpg --verify fineract-0.6.0-incubating-src.tar.gz.asc apache-fineract-0.6.0-incubating-src.tar.gz gpg: Signature made Tue Dec |
8 21:32:07 2015 CET using RSA key ID 0BB29444 gpg: Can't check signature: public key not found |
We don't have the release manager's public key ( 0BB29444 ) in our local system. You now need to retrieve the public key from a key server. One popular server is pgpkeys.mit.edu
(which has a web interface ). The public key servers are linked together, so you should be able to connect to any key server or KEYS file which is available as part Apache Fineract Project (https://dist.apache.org/repos/dist/dev/incubator/fineract)
...