[New-bugs-announce] [issue30992] Invalid PGP Key Prevents Archive Validation
Chris White
report at bugs.python.org
Sat Jul 22 11:53:23 EDT 2017
New submission from Chris White:
When trying to validate the Python 3.6.1 tgz using the ASC file, I can't import all the keys due to the following error:
```
gpg: Note: signatures using the MD5 algorithm are rejected
gpg: key ED9D77D5: no valid user IDs
gpg: this may be caused by a missing self-signature
```
This is using Ubuntu 16.04 and gpg (GnuPG) 1.4.20, running the command
```
wget https://www.python.org/static/files/pubkeys.txt
gpg --import pubkeys.txt
```
If I take out the key ID manually out of the entire list and import the keys by their IDs instead it works.
----------
components: Installation
messages: 298858
nosy: cwprogram
priority: normal
severity: normal
status: open
title: Invalid PGP Key Prevents Archive Validation
type: security
versions: Python 3.6
_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue30992>
_______________________________________
More information about the New-bugs-announce
mailing list