[19:39:17] I'm trying to install mediawiki from https://www.mediawiki.org/wiki/Download. I downloaded 1.29.2 and the GPG signatures, and the GPG keys. There are two keys in the keys file but neither mach the key used to sign 1.29.2. Am I doing something wrong? [19:42:21] keys in key file: E8A3FEC4, F9F8CD79. Key used to sign: 9D3BB7B0 [19:44:53] gpg: Signature made Tue 14 Nov 2017 22:40:28 GMT [19:44:53] gpg: using DSA key 9B69B3109D3BB7B0 [19:46:13] gpg: Signature made Tue 14 Nov 2017 05:40:28 PM EST using DSA key ID 9D3BB7B0 [19:46:14] gpg: Can't check signature: No public key [19:46:40] Uh [19:46:47] What did you download? [19:47:11] Steps to reproduce welcome [19:47:23] https://releases.wikimedia.org/mediawiki/1.29/mediawiki-1.29.2.tar.gz.sig [19:47:27] wget wget https://releases.wikimedia.org/mediawiki/1.29/mediawiki-1.29.2.tar.gz.sig [19:47:36] wget wget https://releases.wikimedia.org/mediawiki/1.29/mediawiki-1.29.2.tar.gz [19:47:43] gpg --verify mediawiki-1.29.2.tar.gz.sig [19:50:55] I've put everything in https://pastebin.ca/3937363 [19:53:50] FWIW, google suggests that the key 9B69B3109D3BB7B0 might belong to Reedy. [19:54:20] Indeed [19:56:47] Why did it only import Tims...? [19:56:50] Your key seems to be in https://www.mediawiki.org/keys/keys.html ; why did GPG not load it? [19:56:57] heh, yeah [19:57:15] There's many others [19:57:17] Also... [19:57:21] I signed the git tags with the same key [19:57:31] And they've been "verified" by github [19:57:39] DHR: Try https://www.mediawiki.org/keys/keys.txt ? [19:57:50] Just incase the HTML is borked for some reason [19:57:53] I'm using CentOS 7. [19:58:08] sorry: got an urgent call. Back in a bit.