Re: GPG: Running "dpkg-sig --verify *.deb" does not output "GOODSIG

SOLVED

Reproducing the steps here in case any other users might find this helpful:

How to verify the Armory binary on Linux (in this case, Ubuntu):

(1) Do 'cd' to the directory where the deb file was downloaded.

(2) Do:

Code:

$ sha256sum armory_0.93.2_ubuntu-64bit.deb

(substituting the name of the particular deb file which you downloaded).

This should produce something like the following output:

Code:

677b484cbafcaff8a520cd4526beff985ca73eed54b437fa5cfdc123bd2c517a armory_0.93.2_ubuntu-64bit.deb

(3) Look in the file:

Code:

armory_0.93.2_sha256sum.txt.asc

and make sure that the hash shown in the above file for the file being checked (in this case, armory_0.93.2_ubuntu-64bit.deb) matches the hash produced in the output for step (2).

(4) Also verify the signature of the file:

Code:

armory_0.93.2_sha256sum.txt.asc

by doing:

Code:

$ gpg --verify armory_0.93.2_sha256sum.txt.asc

This should produce the following output:

Code:

gpg: Signature made Sun 07 Jun 2015 10:46:36 PM BRT using RSA key ID 98832223
gpg: Good signature from "Alan C. Reiner (Offline Signing Key) "
gpg: aka "Alan C. Reiner (Armory Signing Key) "
gpg: aka "Alan C. Reiner (Armory Signing Key) "
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 821F 1229 36BD D565 366A C36A 4AB1 6AEA 9883 2223