Unable to verify encrypted file signature

7,598

It seems you don't have the public key of Set B (PB) in your keyring of Set A. Thus, gnupg won't be able to know if it was really a good signature from that key. Without you having PB, the signature will just "look like" it has been signed by the key with the key id of 0xXXXXXXXX, but it lacks the PB to check it thoroughly.

You might encounter this issue with Kleopatra, and the solution is to set the trust of the public key before verifying. Even if you have the correct public key for the signed file/message, the response from the application will show as not valid unless the public key is trusted.

Share:
7,598

Related videos on Youtube

Synetech
Author by

Synetech

Sadly, I’ve become soured by the SE network. It started great, but went downhill. Some mods are too aggressive/bias, policies are arbitrarily/capriciously/selectively applied, and some users treat the sites as MMOGs, “rep-whoring”, copying others’ work, and posting random guesses to game the system by abusing and exploiting auto-bounty assignment. I care(d) about the integrity of the site, so I feel anywhere that allows such disreputable behavior isn’t somewhere worth staying. My OCD not withstanding, I won’t be contributing much here anymore and will find somewhere else to help people. I apologize to all of the people I would have helped here in the future. Press the chemise key to continue… 😈 Images As a visual-learner, I often add images to my posts to make them more effective. Sometimes I take photos, sometimes I create them with software, sometimes I find them through Google Images or Wikipedia. Mod I’ve been asked hey bro, y u no b mod? get u POWR! impr0ve site (or some other variation). I had considered it and was even tempted to run a few times, but I just have too much to do already, so I can’t take on that kind of commitment when I know I won’t be able to do as good a job as I’d like, or as Sweet Brown would say, ain’t nobody got time fo’ dat. Besides, as the behavior of the other mods became more and more apparent, I realized that it would be pointless.

Updated on September 18, 2022

Comments

  • Synetech
    Synetech over 1 year

    Using Kleopatra, I have geneated two sets of keys to sign and encrypt a file:

    • Set A:
      • Public key : PA
      • Private Key : PRA
    • Set B:
      • Public key : PB
      • Private Key : PRB

    I have used (PA) of Set A and for signature, (PRB) in Set B. This process executed successfully and generated an encrypted file.

    However, when trying to verify the signature and decrypt/verify the files with Kleopatra, I get the following results:

    The file was decrypted but not validated the signature.

    test.text.asc -->test.txt: Not enough information to check signature validity.

    Signed on 2012-03-23 07:49 by [email protected] (Key ID :xxxxxxx). The validity of the signature cannot be verified.

    What’s wrong? Please advise if I am missing any settings.