Re: Adding fingerprint to Emacs signature file?

[Eli Zaretskii]

> From: Tadeus Prastowo <0x66726565@gmail.com>
> Date: Wed, 3 Nov 2021 04:50:05 +0100
> Cc: emacs-devel@gnu.org
> 
> 2. Test using Emacs.
> wget  http://mirror.kumi.systems/gnu/emacs/emacs-27.2.tar.xz.sig
> http://mirror.kumi.systems/gnu/emacs/emacs-27.2.tar.xz
> cat emacs-27.2.tar.xz  | gpg --keyserver hkp://keyserver.ubuntu.com:80
> --auto-key-retrieve --verify emacs-27.2.tar.xz.sig -
> 
> The output of the last command is as follows:
> gpg: Signature made Thu 25 Mar 2021 12:53:08 PM CET
> gpg:                using RSA key 91C1262F01EB8D39
> gpg: Can't check signature: No public key

You need to do this, I think:

  gpg --import gnu-keyring.gpg

> Would it be possible for future Emacs signature files to have the
> issuer fingeprint as well?  Since I have not sought through the Emacs
> mailing list archive, I am sorry if this issue has been raised in the
> past.

I was using the procedure provided for all the GNU FTP uploaders.  I
don't know what your proposal means in terms of changes to that
procedure, but I suggest to raise it with the relevant people, at
ftp-upload@gnu.org.