I just downloaded a fresh copy of veracrypt from the official website, however I'm having some trouble verifying its signature.
Here's what I did:
- gpg import veracrypt.asc (from here)
- -gpg --verify "VeraCrypt Setup 1.24-Update7.exe.sig" "VeraCrypt Setup 1.24-Update7.exe"
PGP for some reason is unable to verify the signature, what gives?
If you'd provide GPG output it would be easier to answer. However, most likely the reason is in redundant parameter, your command line should be like:
gpg --verify "VeraCrypt Setup 1.24-Update7.exe.sig", given that both .sig and .exe files are put in the same directory.This is called 'detached signature':
.exe.sigfile contains signature itself, and GnuPG would look for the signed contents in a file without.sigextension.