5
1
I am trying to figure out how to do the following in one command.
I have an ISO image along with its signature file *.sig. I tried to verify it via GnuPG 2 but it reported a missing public key giving me its fingerprint. I have successfully retrieved a key using the following
gpg2 --keyserver hkp://keys.gnupg.net --recv-key <fingerprint>
but when I checked the key
gpg2 --edit-key <KEY ID>
followed by
gpg> check
I have got this message:
27 signatures not checked due to missing keys
How can I retrieve all these keys to check that the key I have got is trusted?
2I found a workaround using shell:
gpg2 --list-sigs <KEY ID> | grep "ID not found" | cut -c 14-29 | xargs --interactive gpg2 --keyserver hkp://keys.gnupg.net --recv-key' but I am still interested in
gpg2` if it exists. You know relying on number of characters in output is not the best approach – Celdor – 2017-05-27T11:07:03.967It turns out I need to
cut
with14-31
instead of14-29
– Lucius Hu – 2019-05-28T02:54:04.170