Bitcoin Forum

Bitcoin => Development & Technical Discussion => Topic started by: Forsyth Jones on September 19, 2021, 10:57:59 PM



Title: How to verify the signature of the Bitcoin Core 22.0 file?
Post by: Forsyth Jones on September 19, 2021, 10:57:59 PM
So, now in this new version, they inserted several pubkeys in the file "SHA256SUMS.asc" and I don't know how to verify the file signature correctly anymore, I really want to test the new version of Bitcoin Core.


Title: Re: How to verify the signature of the Bitcoin Core 22.0 file?
Post by: BitMaxz on September 19, 2021, 11:09:56 PM
There is no proper guide yet to verify its signature and It seems other users experienced some issues when verifying the signature.
Look here: https://github.com/bitcoin-core/bitcoincore.org/issues/793

Check this link below for some of the commands it might be able to help you to verify the signature.
- https://github.com/bitcoin/bitcoin/issues/22965


Title: Re: How to verify the signature of the Bitcoin Core 22.0 file?
Post by: Forsyth Jones on September 19, 2021, 11:17:25 PM
Is it no longer "Wladimir J. van der Laan" who signs the file? Also, I don't have the GPG key for any of these 13, why have they changed drastically?

Now I need to validate the veracity of these 13 keys/signatures, but today I won't be able to do that.

But anyway, thanks. I will see this later.


Title: Re: How to verify the signature of the Bitcoin Core 22.0 file?
Post by: BitMaxz on September 19, 2021, 11:34:22 PM
Is it no longer "Wladimir J. van der Laan" who signs the file?

According to this post https://bitcointalk.org/index.php?topic=5360384.msg57956861#msg57956861
It was signed by 0xb10c one of the developers of bitcoin core.

Actually, I'm also having an issue verifying the signature with Windows OS getting some errors when trying to verify it.

According to this post (https://github.com/bitcoin/bitcoin/issues/22965#issuecomment-918574263), you need both SHA256SUMS and SHA256SUMS.asc but in my case import it to GPG tool only SHA256SUMS.asc I can import on GPG tool and I don't know how I will import the SHA256SUMS file on that tool to be able to verify the signature.

If you are looking on that two files then you can download them both here https://bitcoincore.org/bin/bitcoin-core-22.0/