gpg: no valid OpenPGP data found. error trying to verify the gpg signature

Support
1

Running next command in Terminal (Mac) gpg --verify syncthing.sig syncthing Error: gpg: no valid OpenPGP data found. gpg: the signature could not be verified. Please remember that the signature file (.sig or .asc) should be the first file given on the command line.

I have downloaded the Syncthing from here: https://syncthing.net/ for MacOS 64 bit.

Also When I run: gpg syncthing.sig

Getting similar error: gpg: no valid OpenPGP data found. gpg: processing message failed: Unknown system error

At the same time verifying KeyPassX gpg signature is working fine: gpg --verify KeePassX-2.0.2.dmg.sig KeePassX-2.0.2.dmg gpg: Signature made Mon Feb 1 16:32:44 2016 PST using RSA key ID 83135D45 gpg: Good signature from "Felix Geyer " [unknown] gpg: aka "Felix Geyer " [unknown] gpg: aka "Felix Geyer " [unknown] gpg: aka "Felix Geyer " [unknown] gpg: aka "Felix Geyer " [unknown] gpg: aka "Felix Geyer " [unknown] gpg: aka "Felix Geyer " [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 164C 7051 2F79 2947 6764 AB56 FE22 C6FD 8313 5D45

Will appreciate any help,

2

The sig file in the distributions packages is not an PGP signature - it’s for the auto upgrade mechanism. Please see https://syncthing.net/security.html for how to verify a release manually and https://docs.syncthing.net/dev/release-signing.html for the background info.

3

Thanks calmh. That worked

1 Like
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.