3

I just downloaded a fresh copy of veracrypt from the official website, however I'm having some trouble verifying its signature.

Here's what I did:

  1. gpg import veracrypt.asc (from here)
  2. -gpg --verify "VeraCrypt Setup 1.24-Update7.exe.sig" "VeraCrypt Setup 1.24-Update7.exe"

PGP for some reason is unable to verify the signature, what gives?

1 Answers1

0

If you'd provide GPG output it would be easier to answer. However, most likely the reason is in redundant parameter, your command line should be like:

gpg --verify "VeraCrypt Setup 1.24-Update7.exe.sig", given that both .sig and .exe files are put in the same directory.

This is called 'detached signature': .exe.sig file contains signature itself, and GnuPG would look for the signed contents in a file without .sig extension.

Nickolay Olshevsky
  • 13,706
  • 1
  • 34
  • 48