setup-x86.exe BAD signature from "Cygwin <cygwin@cygwin.com>"

[Brian Inglis]

On 2016-10-17 14:20, Thomas Sanders wrote:
> Am I doing something wrong here?
> gpg --verify setup-x86.exe.sig setup-x86.exe
> gpg: Signature made Fri 09 Sep 2016 02:20:02 AM PDT using DSA key ID 676041BA
> gpg: BAD signature from "Cygwin <cygwin@cygwin.com>"
> If I am not doing something wrong, this has been going on for a few weeks.
> Please advise either way.
> Thanks!

Try:
$ gpg --recv-keys 676041BA
$ gpg --edit-key 676041BA
gpg> trust
pub  1024D/676041BA  created: 2008-06-13  expires: never       usage: SC
                      trust: ultimate      validity: ultimate
sub  1024g/A1DB7B5C  created: 2008-06-13  expires: never       usage: E
[ultimate] (1). Cygwin <cygwin@cygwin.com>

Please decide how far you trust this user to correctly verify other users' keys
(by looking at passports, checking fingerprints from different sources, etc.)

   1 = I don't know or won't say
   2 = I do NOT trust
   3 = I trust marginally
   4 = I trust fully
   5 = I trust ultimately
   m = back to the main menu

Your decision? 5
Do you really want to set this key to ultimate trust? (y/N) y

pub  1024D/676041BA  created: 2008-06-13  expires: never       usage: SC
                      trust: ultimate      validity: ultimate
sub  1024g/A1DB7B5C  created: 2008-06-13  expires: never       usage: E
[ultimate] (1). Cygwin <cygwin@cygwin.com>

gpg> q

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple