[Bug 1331057] Re: Can't be used to verify current trusty images

[Dimitri John Ledkov]

** Also affects: ubuntu-keyring (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: ubuntu-keyring (Ubuntu)
       Status: New => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to ubuntu-keyring in Ubuntu.
https://bugs.launchpad.net/bugs/1331057

Title:
  Can't be used to verify current trusty images

Status in ubuntu-cloudimage-keyring package in Ubuntu:
  Confirmed
Status in ubuntu-keyring package in Ubuntu:
  In Progress

Bug description:
  The description of this package says "This package contains the keys
  used for files on cloud-images.ubuntu.com." However, the checksum
  files are signed with keyid 7DB87C81, which I can't find in this
  package.

  ubuntu at server-46af3152-8a83-4995-8dfb-e3b2d07e0841:~$ wget http://cloud-images.ubuntu.com/trusty/current/SHA256SUMS http://cloud-images.ubuntu.com/trusty/current/SHA256SUMS.gpg
  ubuntu at server-46af3152-8a83-4995-8dfb-e3b2d07e0841:~$ gpg --verify SHA256SUMS.gpg SHA256SUMS
  gpg: Signature made Sat 14 Jun 2014 01:03:39 PM UTC using RSA key ID 7DB87C81
  gpg: Can't check signature: public key not found
  ubuntu at server-46af3152-8a83-4995-8dfb-e3b2d07e0841:~$ gpg --keyring /usr/share/keyrings/ubuntu-cloudimage-keyring.gpg --list-keys/usr/share/keyrings/ubuntu-cloudimage-keyring.gpg
  -------------------------------------------------
  pub   4096R/476CF100 2012-10-27
  uid                  Ubuntu Cloud Image Builder (Canonical Internal Cloud Image Builder) <ubuntu-cloudbuilder-noreply at canonical.com>
  sub   4096R/9D817405 2012-10-27

  ubuntu at server-46af3152-8a83-4995-8dfb-e3b2d07e0841:~$ dpkg -l ubuntu-cloudimage-keyring
  Desired=Unknown/Install/Remove/Purge/Hold
  | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-p end
  |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
  ||/ Name                       Version            Architecture       Description
  +++-==========================-==================-==================-=========================================================
  ii  ubuntu-cloudimage-keyring  2013.11.11         all                GnuPG keys of the Ubuntu Cloud Image builder

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-cloudimage-keyring/+bug/1331057/+subscriptions