ECS CLI GnuPG verify "BAD signature"

0

I'm following the instructions for https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ECS_CLI_installation.html and am following the step to verify the ECS CLI.

In step 2 I retrieved the key from the key server:
shawn@Shawns-MacBook-Air ~ % gpg --keyserver hkp://keys.gnupg.net --recv BCE9D9A42D51784F
CQAKCRBQ3szEcQ5hr+ykD/4tOLRHFHXuKUcxgGaubUcVtsFrwBKma1cYjqaPms8u
gpg: directory '/Users/shawn/.gnupg' created
gpg: keybox '/Users/shawn/.gnupg/pubring.kbx' created
gpg: /Users/shawn/.gnupg/trustdb.gpg: trustdb created
gpg: key BCE9D9A42D51784F: public key "Amazon ECS ecs-security@amazon.com" imported
gpg: Total number processed: 1
gpg: imported: 1

Then I downloaded the signature for the CLI and attempted to verify it, but it fails and the instructions don't say what to do about that:

shawn@Shawns-MacBook-Air ~ % gpg --verify ecs-cli.asc /usr/local/bin/ecs-cli
gpg: Signature made Tue Dec 22 05:40:02 2020 +07
gpg: using RSA key DE3CBD61ADAF8B8E
gpg: BAD signature from "Amazon ECS ecs-security@amazon.com" [unknown]

I know I can just ignore it, but what's the point of verifying if only to ignore the results?

Thank you,
shawn.

shwn
asked 3 years ago337 views
1 Answer
0

I removed the key from GPG and deleted the ecs--cli.asc file that I had downloaded, and then redownloaded them both and tried again. This time it passed:

shawn@Shawns-MacBook-Air ~ % gpg --verify ecs-cli.asc /usr/local/bin/ecs-cli
gpg: Signature made Tue Dec 22 05:40:02 2020 +07
gpg: using RSA key DE3CBD61ADAF8B8E
gpg: Good signature from "Amazon ECS ecs-security@amazon.com" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: F34C 3DDA E729 26B0 79BE AEC6 BCE9 D9A4 2D51 784F
Subkey fingerprint: EB3D F841 E2C9 212A 2BD4 2232 DE3C BD61 ADAF 8B8E

shwn
answered 3 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions