{"action":"created","issue":{"url":"https://api.github.com/repos/wayneeseguin/rvm/issues/3302","labels_url":"https://api.github.com/repos/wayneeseguin/rvm/issues/3302/labels{/name}","comments_url":"https://api.github.com/repos/wayneeseguin/rvm/issues/3302/comments","events_url":"https://api.github.com/repos/wayneeseguin/rvm/issues/3302/events","html_url":"https://github.com/wayneeseguin/rvm/issues/3302","id":57611371,"number":3302,"title":"public key verification - .asc contents not matching","user":{"login":"recunius","id":3921498,"avatar_url":"https://avatars.githubusercontent.com/u/3921498?v=3","gravatar_id":"","url":"https://api.github.com/users/recunius","html_url":"https://github.com/recunius","followers_url":"https://api.github.com/users/recunius/followers","following_url":"https://api.github.com/users/recunius/following{/other_user}","gists_url":"https://api.github.com/users/recunius/gists{/gist_id}","starred_url":"https://api.github.com/users/recunius/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/recunius/subscriptions","organizations_url":"https://api.github.com/users/recunius/orgs","repos_url":"https://api.github.com/users/recunius/repos","events_url":"https://api.github.com/users/recunius/events{/privacy}","received_events_url":"https://api.github.com/users/recunius/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/wayneeseguin/rvm/labels/feedback%20needed","name":"feedback needed","color":"eb6420"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":8,"created_at":"2015-02-13T15:25:09Z","updated_at":"2015-02-22T16:17:09Z","closed_at":null,"body":"I imported your public key. The fingerprint of the mpapis key I imported is matching the fingerprint on https://keybase.io/mpapis. However, the contents of the armored public key are not:\r\n\r\nSteps to Reproduce:\r\n* gpg2 --keyserver hkp://keys.gnupg.net --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3\r\n> gpg: requesting key D39DC0E3 from hkp server keys.gnupg.net\r\n> gpg: key D39DC0E3: public key \"Michal Papis (RVM signing) <mpapis@gmail.com>\" imported\r\n> gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model\r\n> gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u\r\n> gpg: next trustdb check due at 2020-02-12\r\n> gpg: Total number processed: 1\r\n> gpg:               imported: 1  (RSA: 1)\r\n\r\n* gpg2 --list-keys --fingerprint\r\n> pub   4096R/D39DC0E3 2014-10-28\r\n>      Key fingerprint = 409B 6B17 96C2 7546 2A17  0311 3804 BB82 D39D C0E3\r\n> uid                  Michal Papis (RVM signing) <mpapis@gmail.com>\r\n> sub   4096R/BF04FF17 2014-10-28 [expires: 2016-01-05]\r\n\r\n* gpg2 --armor --export mpapis@gmail.com\r\n> -----BEGIN PGP PUBLIC KEY BLOCK-----\r\n> Version: GnuPG v2.0.22 (GNU/Linux)\r\n> \r\n> mQINBFRQA8EBEADrLHxW4807EJMzDjhrR5+FRy5/3616nyLlbWFTLnS1/i514L7Z\r\n> LVzbho4eZWjErRWqT1mr+E7dr/c8Ei5J8kUMqm5MoSkCoc5Y7Gp0jKhfDF4Megpd\r\n> X2ZKw7VG+4GZU9gxbm+6ymHeDAFRfQjUoHzCZsdsgnhi1C58kMoY39dFidlk24AG\r\n> E7y8WEg42yzSyJFjK5+qdGuKTBK4UmYM3uxHbxZgBLZ1PQ9DhsToauTqQSJEFzC+\r\n> r4qQeO6CeZAUEhgCt3HnmKE8hdARQelNRICrQc/Gpd3c3Wcpi3zj61cRqTCDBtNJ\r\n> h66bN+b6MilfT1S+9YMqLACXIWRcXPPUUWanmleguzGfngRjr/qf2PF6g2HYsp40\r\n> ....\r\n> 2v5rmXmsv6dPS/qlTJrSiRZzU5l2m/shqK3fAJGrajuNhMlO2D9+utrtuz/jGPvb\r\n> 6mJyiQjoX+wEqSo55Fk9nk0UpWUMTn8Av9vcWTRxK54S6yktfzrZM4sOudImwZuR\r\n> ff8GOW2oiAJntzaQ/OqnUFUWNTN94lCmYE4NdKlX/02/FAilRJdQ+XY7upNs8Cy0\r\n> g9PT4+y3M3FyyATOaugHszu1OAq6\r\n> =QtCH\r\n> -----END PGP PUBLIC KEY BLOCK-----\r\n\r\nThe beginning of the armored keys match, but by the end of the output they do not.\r\n\r\nAm I doing something wrong when comparing or do the full keys not match?\r\n\r\nThe public key I imported does verify the installer when running these commands\r\n> curl -O https://raw.githubusercontent.com/wayneeseguin/rvm/master/binscripts/rvm-installer\r\n> curl -O https://raw.githubusercontent.com/wayneeseguin/rvm/master/binscripts/rvm-installer.asc\r\n> gpg --verify rvm-installer.asc\r\n\r\nAs a test I've created my own RSA key using \"gpg2 --gen-key\" of type RSA and RSA and when I export and import the public key on different machines they are identical.\r\n"},"comment":{"url":"https://api.github.com/repos/wayneeseguin/rvm/issues/comments/75442829","html_url":"https://github.com/wayneeseguin/rvm/issues/3302#issuecomment-75442829","issue_url":"https://api.github.com/repos/wayneeseguin/rvm/issues/3302","id":75442829,"user":{"login":"mpapis","id":48054,"avatar_url":"https://avatars.githubusercontent.com/u/48054?v=3","gravatar_id":"","url":"https://api.github.com/users/mpapis","html_url":"https://github.com/mpapis","followers_url":"https://api.github.com/users/mpapis/followers","following_url":"https://api.github.com/users/mpapis/following{/other_user}","gists_url":"https://api.github.com/users/mpapis/gists{/gist_id}","starred_url":"https://api.github.com/users/mpapis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mpapis/subscriptions","organizations_url":"https://api.github.com/users/mpapis/orgs","repos_url":"https://api.github.com/users/mpapis/repos","events_url":"https://api.github.com/users/mpapis/events{/privacy}","received_events_url":"https://api.github.com/users/mpapis/received_events","type":"User","site_admin":false},"created_at":"2015-02-22T16:17:09Z","updated_at":"2015-02-22T16:17:09Z","body":"@dpelletier the last line says all: `GPG verified '/home/dmpelletier/.rvm/archives/rvm-installer'` - if you still have doubts - open a new ticket"}}