importing public keys in Linux – (.pub / .public) tested on CentOS 7.2

Doing some test with different files to verify the integrity of them I got some errors that basically I did not have any idea what was the meaning. This test was using the method “signature” file.

The following example show the error message i got and let’s see how to fix that.

Example: dk-0.0 -Win.exe

[root@securitytweak]# gpg –verify dk-0.0-Win.exe.sig dk-0.0-Win.exe

gpg: directory `/root/.gnupg’ created

gpg: new configuration file `/root/.gnupg/gpg.conf’ created

gpg: WARNING: options in `/root/.gnupg/gpg.conf’ are not yet active during this run

gpg: keyring `/root/.gnupg/pubring.gpg’ created

gpg: Signature made Thu 12 Oct 2017 10:21:28 PM CST using RSA key ID 35Z78488

gpg: Can’t check signature: No public key

So, basically that error was because the system does not have the correct public key imported in order to verify the integrity of that file, the message specify the key you need to import (35Z78488) so just find the specific key from the product vendor and import the files using the following example,

Note: The key files extension normally will be, (.pub / .public)

Just ONE key

[root@securitytweak]# gpg –import 35Z78488.pub

Where: “gpg –import [publickeyfile.pub]”

Message successfull:

gpg: directory `/root/.gnupg’ created

gpg: new configuration file `/root/.gnupg/gpg.conf’ created

gpg: WARNING: options in `/root/.gnupg/gpg.conf’ are not yet active during this run

gpg: keyring `/root/.gnupg/secring.gpg’ created

gpg: keyring `/root/.gnupg/pubring.gpg’ created

gpg: /root/.gnupg/trustdb.gpg: trustdb created

gpg: key 35Z78488: public key “SECURITYTWEAK RSA-2048-17” imported

gpg: Total number processed: 1

gpg: imported: 1 (RSA: 1)

More than ONE key

If you have more than one key you can import all of them with just one command,

Keys: 0F0F46CE.public / 4879EDD7.public / AA71A9CF.public / 69F8AA69.public

[root@securitytweak]# gpg –import *.public

Message successful:

gpg: key 0F0F46CE: public key “SECURITYTWEAK RSA-2048-17” imported

gpg: key 4879EDD7: public key “SECURITYTWEAK RSA-2048-18” imported

gpg: key AA71A9CF: public key “SECURITYTWEAK RSA-2048-19” imported

gpg: key 69F8AA69: public key “SECURITYTWEAK RSA-2048-13” imported

After you finish importing all the public keys that you need to sucessfuly verify the integrity please run one more time the command to verify the integrity of the file.