Can't check the fingerprint and set the trust

User Support
1

I typed the following command:
gpg2 --import qubes-master-signing-key.asc

The following message was displayed:
gpg: keybox ‘/home/nntn/.gnupg/pubring.kbx’ created
gpg: key 1848792F9E2795E9: 1 signature not checked due to a missing key
gpg: /home/nntn/.gnupg/trustdb.gpg: trustdb created
gpg: key 1848792F9E2795E9: public key “Qubes OS Release 4 Signing Key” imported
gpg: Total number processed: 1
gpg: imported: 1
gpg: no ultimately trusted keys found

I then typed the following command:
gpg2 --edit-key 0x427F11FD0FAA4B080123F01CDDFA1A3E36879494

The following message was displayed:
gpg (GnuPG) 2.2.19; Copyright (C) 2019 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

gpg: key “0x427F11FD0FAA4B080123F01CDDFA1A3E36879494” not found: No public key

I was not able to download the “Detached PGP Signature” from here Download Qubes OS | Qubes OS

It just displays the file and there isn’t an option to download it.

Would the missing “Detached PGP Signature” be the problem?

I am not able to check the fingerprint and set the trust.

How do I download the file “Detached PGP Signature”?

2

gpg: key 1848792F9E2795E9: public key “Qubes OS Release 4 Signing Key” imported

5817 A43B 283D E5A9 181A 522E 1848 792F 9E27 95E9 is the Qubes OS Release 4 Signing Key

gpg2 --edit-key 0x427F11FD0FAA4B080123F01CDDFA1A3E36879494

427F 11FD 0FAA 4B08 0123 F01C DDFA 1A3E 3687 9494 is the Qubes Master Signing Key

(different key than the one you imported)

2 Likes
3

I skipped a step. That’s why!

So I got this message - gpg: Good signature from “Qubes OS Release X Signing Key”

Is this the last and finished step in verifying the signatures? Is there anything else for this process to be completed?

There is another section “How to verify signatures on Git repository tags and commits”. I think this doesn’t apply. Does it?

4

It unnecessary for you

5

Right-click > Save link as…

That depends. What are you trying to do?