Gpg: Can't check signature: No public key

I'm new to OpenWRT and am working on installing it for the first time. I'm trying to verify the GPG signature, as described here. I've downloaded sha256sums and sha256sums.asc from here. However, running gpg --with-fingerprint --verify sha256sums.asc sha256sums gives the following:

gpg: Signature made Wed 17 Feb 2021 04:25:52 AM MST
gpg:                using RSA key D9C6901F45C9B86858687DFF28A39BC32074BE7A
gpg: Can't check signature: No public key

All the StackOverflow posts I've read suggest I need to import the .asc with gpg --import sha256sums.asc. The fingerprint shown above matches one of the fingerprints here, so I'm happy to do that. That command gives this error:

gpg: no valid OpenPGP data found.
gpg: Total number processed: 0

Is anyone else encountering the same thing? Does anyone have any suggestions for what I'm missing?

Thank you!

1 Like
gpg --recv-keys 28A39BC32074BE7A

https://openwrt.org/docs/guide-user/security/signatures

Bingo! That worked. Thanks.

1 Like

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.