What Do I Do If a "WARNING" or "FAIL" Message Is Returned When I Check the Integrity of a Software Package?
If a "WARNING" or "FAIL" message is returned, the software package fails to pass the verification. See Table 11-1 to handle the problem.
Verification Result Description |
Displayed Information |
Verification Result |
Solution |
|---|---|---|---|
The signature verification is successful and no exception occurs. |
gpg: Signature made Thu Jan 9 15:29:06 2014 CST using RSA key ID 27A74824 gpg: Good signature from "OpenPGP signature key for Huawei software (created on 30th Dec,2013) <support@huawei.com>" |
PASS |
NA |
The signature verification fails. |
gpg: Signature made Thu Jan 9 15:29:06 2014 CST using RSA key ID 27A74824 gpg: BAD signature from "OpenPGP signature key for Huawei software (created on 30th Dec,2013) <support@huawei.com>" |
FAIL |
Download the target file again. |
No public key is found. |
gpg: Signature made Thu Jan 9 15:20:01 2014 CST using RSA key ID 27A74824 gpg: Can't check signature: public key not found |
FAIL |
Download the public key again. For details, see 1. |
The signature verification is successful, but the public key is not ultimately trusted. |
gpg: Signature made Thu Jan 9 15:29:06 2014 CST using RSA key ID 27A74824 gpg: Good signature from "OpenPGP signature key for Huawei software (created on 30th Dec,2013) <support@huawei.com>" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: B100 0AC3 8C41 525A 19BD C087 99AD 81DF 27A7 4824 |
WARNING |
After confirming that the key ID is 27A74824, set the Huawei public key to be trustworthy. For details, see 5. |
No source file is found. |
gpg: no signed data gpg: can't hash datafile: No data |
FAIL |
Download the target file again. |
The signature has expired. |
gpg: Signature made 04/24/13 10:50:29 CST using RSA key ID 133B64E5 gpg: Expired signature from " OpenPGP signature test key <support@huawei.com>" gpg: Signature expired 04/25/13 10:50:29 CST |
FAIL |
Download the target file with an updated signature. |
The signature verification is successful, but the public key has been revoked. |
gpg: Signature made 06/13/13 11:14:49 CST using RSA key ID 133B64E5 gpg: Good signature from " OpenPGP signature test key <support@huawei.com>" gpg: WARNING: This key has been revoked by its owner! gpg: This could mean that the signature is forged. gpg: reason for revocation: Key is no longer used gpg: revocation comment: |
WARNING |
Download the latest public key and target file with an updated signature. |
No signature file of the source file is found. |
None |
WARNING |
Download the signature file of the target file. |
