Bitcoin Forum

Hi,

I just downloaded electrum from electrum.org but the verification doesn't work as expected.
What I'm doing wrong?

Anyone knows?

Here is the commands and the error message:

pi@RaspiCrypto:~/Downloads $ gpg --import ThomasV.asc
gpg: /home/pi/.gnupg/trustdb.gpg: trustdb created
gpg: key 2BD5824B7F9470E6: public key "Thomas Voegtlin (https://electrum.org) <thomasv@electrum.org>" imported
gpg: Total number processed: 1
gpg:               imported: 1


gpg --verify Electrum-4.0.2.tar.gz.asc
gpg: assuming signed data in 'Electrum-4.0.2.tar.gz'
gpg: Signature made Wed 08 Jul 2020 09:48:15 AM CEST
gpg:                using RSA key 6694D8DE7BE8EE5631BED9502BD5824B7F9470E6
gpg: Good signature from "Thomas Voegtlin (https://electrum.org) <thomasv@electrum.org>" [unknown]
gpg:                 aka "ThomasV <thomasv1@gmx.de>" [unknown]
gpg:                 aka "Thomas Voegtlin <thomasv1@gmx.de>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 6694 D8DE 7BE8 EE56 31BE  D950 2BD5 824B 7F94 70E6

The problem for me is this warning message even if it says "good signature..."

Thanks

You can follow the guide How to Safely Download and Verify Electrum (https://bitcointalk.org/index.php?topic=5240594.0) of DireWolfM14 (https://bitcointalk.org/index.php?action=profile;u=2003859). Try again with steps in the guide and see that you will be able to verify ThomasV' signature.

That is a correctly verified signature.

The line "Good signature from "Thomas Voegtlin (https://electrum.org) <thomasv@electrum.org>"", tells you that the Electrum file you downloaded was indeed signed by Thomas Voegtlin.

The line "WARNING: This key is not certified with a trusted signature!" simply tells you that you have not certified the key in GPG. As long as you are sure the key is correct (and I can also confirm that the key you listed - 6694 D8DE 7BE8 EE56 31BE  D950 2BD5 824B 7F94 70E6 - matches the key I have for Thomas Voegtlin), then you do not need to worry about this.

If you face any problem then first go for electrum official support hope they can easily solve it.
And you can search through YouTube for best ways to solve electrum problems.

Electrum does not have "official support". Anyone claiming to be Electrum's official support on here, twitter, medium, telegram, discord, etc., is trying to scam you.

If you have problems with Electrum, the first thing to do is to search in the following two places:
https://electrum.readthedocs.io/
https://bitcoinelectrum.com/

If you cannot find an answer, then you can ask your question on the Electrum board of this forum (https://bitcointalk.org/index.php?board=98.0), or open an issue on Electrum's GitHub (https://github.com/spesmilo/electrum/issues).

exactly. And there is no issue in first place to complain about or look for some entity to report it to them.
Let's make it simple, the problem here is that OP did not add Thomas V to his trust network (keyring).
So, he will see the signature of the file as valid but the signer is not someone he trusts.
This is not really an issue, just add Thomas V to your trust network (if you think you will need to verify any of his apps in the future) and every thing must be OK.

Fine!

Many, many thanks guys for your help!

As I'm new in this area I wasn't sure about this Warning message!

So, the verification is then OK and that's the important thing!

Thanks again