git/list[1] front-page[2] threads[3] people[4] search[5] about
 

DSA key

From
GFGaston Fiore <gaston.fiore@gmail.com>
Date
Jun 22, 2010, 00:07 UTC
Message-ID
<3E984B93-F2DB-4F32-BBF9-C6DA3730C54E@gmail.com>
Hello,
I'm trying to verify the download of Git and I get the following:

gbrain:Downloads gafiore$ gpg --verify git-1.7.1.tar.bz2.sign gpg: Signature made Fri Apr 23 22:49:17 2010 EDT using DSA key ID 517D0F0E gpg: Can't check signature: public key not found

How do I know whether I should trust the downloaded file?
Thanks,
-Gaston
Next: J.H.
Message 1 of 2 in “DSA key”
  1. Gaston FioreJun 22, 2010
  2. J.H.Jun 22, 2010

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.