Re: [Help-bash] How to use files like bash-5.0.tar.gz.sig?

[Peng Yu]

Hi,

> Download both bash-5.0.tar.gz and the .sig file into the same directory,
> then run:
>
> $ gpg --verify bash-5.0.tar.gz.sig
>
> to learn if gpg can validate that your copy of bash-5.0.tar.gz is
> byte-wise accurate to the one that Chet signed as being authentic.

I got this. How to fix the problem?

$ gpg --verify bash-5.0.tar.gz.sig
gpg: assuming signed data in 'bash-5.0.tar.gz'
gpg: Signature made Mon Jan  7 07:58:19 2019 CST
gpg:                using DSA key 7C0135FB088AAF6C66C650B9BB5869F064EA74AB
gpg: Can't check signature: No public key

-- 
Regards,
Peng