swox pgp keys

Niels Möller nisse@lysator.liu.se
07 Jan 2003 22:52:48 +0100


I have trouble verifying the signature that accompanies gmp-4.1.2. I
get

  $ gpg --verify gmp-4.1.2.tar.gz.asc gmp-4.1.2.tar.gz
  gpg: Warning: using insecure memory!
  gpg: Signature made Tue Dec 31 07:16:43 2002 CET using DSA key ID 769AFE02
  gpg: requesting key 769AFE02 from wwwkeys.us.pgp.net ...
  gpg: key 769AFE02: public key imported
  gpg: Total number processed: 1
  gpg:               imported: 1
  gpg: Good signature from "Swox AB (Software signing key 2002) <info@swox.com>"
  Could not find a valid trust path to the key.  Let's see whether we
  can assign some missing owner trust values.
  
  No path leading to one of our keys found.
  
  gpg: WARNING: This key is not certified with a trusted signature!
  gpg:          There is no indication that the signature belongs to the owner.
  gpg: Fingerprint: 6BAD 345C 629D 638B E4D7  2E13 FCBD DBD5 769A FE02

I have personally exchanged keys with Torbjörn, so I'm reasonably
confident that the key

  $ gpg --list-sigs tege
  gpg: Warning: using insecure memory!
  pub  1024R/16B7193D 2002-03-02 Torbjorn Granlund <tege@swox.com>
  sig        16B7193D 2002-03-02  Torbjorn Granlund <tege@swox.com>
  sig        A8F4C2FD 2002-03-08  Niels Möller <nisse@lysator.liu.se>

belongs to Torbjörn. I think it's reasonably to expect the keys for
tege@swox and info@swox to sign each other.

Regards,
/Niels