user@user~/Downloads$ gpg --verify eps-v0.2.0.tar.gz.asc electrum-personal-server-windows-release-v0.2.0.zip.asc
You're not verifying what you think you're verifying... You're trying to verify one .asc file, using another .asc file!!?!
You need to verify the matching binary file that goes with the .asc (ie. the ".tar.gz" or the ".zip")...
Try:
gpg --verify eps-v0.2.0.tar.gz.asc electrum-personal-server-eps-v0.2.0.tar.gz
or
gpg --verify electrum-personal-server-windows-release-v0.2.0.zip.asc electrum-personal-server-windows-release-v0.2.0.zip
Theoretically, you could just use "gpg --verify the_binary_filename
.asc"... but ONLY if the .asc file has exactly the same name as the .zip file... so, it'd work with the windows_release .zip...
"electrum-personal-server-windows-release-v0.2.0.zip.asc" == "electrum-personal-server-windows-release-v0.2.0.zip" + .asc
So, this works:
gpg --verify electrum-personal-server-windows-release-v0.2.0.zip.asc
user@user~/Downloads$ gpg --verify electrum-personal-server-windows-release-v0.2.0.zip.asc
gpg: assuming signed data in 'electrum-personal-server-windows-release-v0.2.0.zip'
gpg: Signature made Thu Dec 5 23:57:57 2019 NZDT
gpg: using RSA key EF734EA677F31129
gpg: Good signature from "Chris Belcher <
false@email.com>" [unknown]
But, it won't work with the .tar.gz as it has a different name to the .asc
"eps-v0.2.0.tar.gz.asc" =/= "electrum-personal-server-eps-v0.2.0.tar.gz" +.asc
user@user~/Downloads$ gpg --verify eps-v0.2.0.tar.gz.asc
gpg: no signed data
gpg: can't hash datafile: No data
You could also just rename the "tar.gz.asc" from "eps-v0.2.0.tar.gz.asc" to "electrum-personal-server-eps-v0.2.0.tar.gz.asc" and then the command would work:
user@user~/Downloads$ gpg --verify electrum-personal-server-eps-v0.2.0.tar.gz.asc
gpg: assuming signed data in 'electrum-personal-server-eps-v0.2.0.tar.gz'
gpg: Signature made Thu Dec 5 22:51:58 2019 NZDT
gpg: using RSA key EF734EA677F31129
gpg: Good signature from "Chris Belcher <
false@email.com>" [unknown]