Could not OpenPGP verify authenticity of Whonix News/ help please

Support
1

Hey, how to solve this problem? Saw many similar topics. In the log file removed some private(?) information. Thank you

Blockquote
ERROR: Whonix News Download Result:
Could not OpenPGP verify authenticity of Whonix News !!!
(gpg_bash_lib_output_gpg_verify_exit_code: 0 | gpg_bash_lib_output_validsig_status: true | gpg_bash_lib_output_alright_status: false | gpg_bash_lib_output_failure: )

This is either,

  • a Whonix Bug,
  • an attack on Whonix,
  • or Whonix News Keys might be outdated. Upgrading using apt-get might fix this.

INFO: Whonix News gpg_bash_lib_output_diagnostic_message:
gpg_bash_lib_internal_gpg_verify_status_fd_file: /tmp/tmp./news/verify_dir/news_gpg/gpg_bash_lib_internal_gpg_verify_status_fd_file

gpg_bash_lib_internal_gpg_verify_output_file: /tmp/tmp./news/verify_dir/news_gpg/gpg_bash_lib_internal_gpg_verify_output_file
gpg_bash_lib_output_gpg_import_output:

gpg: keyring /tmp/tmp./news/verify_dir/news_gpg/secring.gpg' created gpg: keyring /tmp/tmp./news/verify_dir/news_gpg/pubring.gpg’ created
gpg: /tmp/tmp./news/verify_dir/news_gpg/trustdb.gpg: trustdb created
gpg: key : public key "Patrick Schleizer " imported
gpg: Total number processed: 1

gpg: imported: 1 (RSA: 1)
gpg: no ultimately trusted keys found
gpg_bash_lib_output_gpg_verify_output:
gpg: Signature made Mon Apr using RSA key ID

gpg: Good signature from "Patrick Schleizer "
gpg: Signature notation: issuer-//////
gpg: Signature notation: file@name=whonix_news.tar.xz
Primary key fingerprint: XXXXXXXXXX

Subkey fingerprint: XXXXXXXXXXXXXXXX
gpg_bash_lib_output_gpg_verify_status_fd_output:
[GNUPG:] SIG_ID XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
[GNUPG:] GOODSIG XXXXXXXXXXXXXXXXXX Patrick Schleizer

[GNUPG:] NOTATION_NAME XXXXXXXXXXXXXXXXXX
[GNUPG:] NOTATION_DATA XXXXXXXXXXXXX
[GNUPG:] NOTATION_NAME XXXXXXXXXXXXXXXXX
[GNUPG:] NOTATION_DATA XXXXXXXXXXXXXXXXXXXXXXXXXXX

[GNUPG:] VALIDSIG XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
[GNUPG:] TRUST_ULTIMATE

2

I’m quoting entr0py's post from earlier today as this applies

Please search the forum first to see if the same issue has already been reported

3

I also currently have the same problem, I came here to find a solution

4

Hey 0brand
Thanks for your replying/being in touch
I’ve signed up looking for a solution to this problem, can you kindly specify to me what do you mean @Patrick needs to refresh the signature file.?

5

Hi fsdsfdfds

Patrick is the lead developer of Whonix. For security reasons the key GPG key/signature has to updated every so often. This is his responsibility. However, Whonix has very limited resources ATM so it may be a few days before this is done. This is nothing to be concerned about. There should be a post from Patrick very soon stating “Fixed”

1 Like
6

Is it possible to work on a virtual machine with this error? will not there be malfunctions/leaks in work?

7

you just have to wait?

8

Please read “Whonix version and Whonix news”

https://www.whonix.org/wiki/Whonixcheck#Checks

1 Like
9

Fixed.