How do I import key when something like a certificate file isn't provided and instead a keyserver?

How do I import key when something like a certificate file isn’t provided and instead a keyserver?

I am on Windows.

I’m trying to verify my Linux Mint iso and it provided the instructions.

Import the Linux Mint signing key:

gpg --keyserver hkp://keys.openpgp.org:80 --recv-key 27DEB15644C6B3CF3BD7D291300F846BA25BAE09

Not sure how to import that in.

I the past I used to be able to click I think lookup on server then search with like Linux Mint, but currently when I do that I just see “Enter an email address to search for matching certificates”. So if I type in Linux Mint or try to search with like 27DEB15644C6B3CF3BD7D291300F846BA25BAE09 the search is grayed out unless I enter in email.

Hi @sparkles,

we no longer have a default keyserver configured for the installations. Only a search for keys with mail addresses is enabled by default via WKD.

You have two possibilities for importing the key:

  1. Open a terminal (cmd.exe on Windows) and enter the command provided by the Linux Mint website.
    or
  2. Configure the keyserver in Kleopatra (Settings → configure Kleopatra → directory services). After that the search will find it via the fingerprint.
1 Like

Thank you I had been wondering if I had messed up something in the settings. Is there a good source for recommended keyservers I can use?

A post-2021 keyserver network is https://spider.pgpkeys.eu/ .
It is non-validating and de-central (instances synchronise with each other), which are important propierties from the point of view of the GnuPG and Gpg4win team.

1 Like

I copy and pasted one of the urls from there. In this case http://keyserver.escomposlinux.org into the openPGP keyserver field. And I was able to find the certificate I wanted.

But, when I attempted to import it in nothing happened. Is there another setting I need to enable to get it to work?

My window for directory services is default aside from having “Use openPGP keyserver” checked with the url filled in.

Try hkps://keyserver.escomposlinux.org instead of http. The usual protocol for keyservers is hkps.

2 Likes

Thank you! Changing it to hkps let me finally import.

1 Like

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.