Skip to content

stack-2.7.1-linux-aarch64.tar.gz.asc appears invalid #5658

Closed
@AlistairB

Description

@AlistairB

General summary/comments (optional)

stack-2.7.1-linux-aarch64.tar.gz.asc does not appear to verify stack-2.7.1-linux-aarch64.tar.gz with the standard signing key. Alternatively doing the stack-2.7.3-linux-aarch64.tar.gz release would also solve my problem. (I am trying to add aarch64 support to the Haskell docker images).

Steps to reproduce

  1. Install gpg.
  2. gpg --batch --keyserver keyserver.ubuntu.com --receive-keys C5705533DA4F78D8664B5DC0575159689BEFB442
  3. curl -sSLO https://github.com/commercialhaskell/stack/releases/download/v2.7.1/stack-2.7.1-linux-aarch64.tar.gz
  4. curl -sSLO https://github.com/commercialhaskell/stack/releases/download/v2.7.1/stack-2.7.1-linux-aarch64.tar.gz.asc
  5. gpg --batch --verify stack-2.7.1-linux-aarch64.tar.gz.asc stack-2.7.1-linux-aarch64.tar.gz

Expected

It verifies. 2.7.1 (and 2.7.3) x86_64 releases work fine with this method.

Actual

gpg: Signature made Mon 31 May 2021 03:18:12 AEST
gpg:                using RSA key 2E15FEF6ACB230D64C56D19A907EAE2F42B52046
gpg: Can't check signature: No public key

Stack version

N/A

Method of installation

N/A

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions