How to download detached PGP sig of Qubes-R4.0-x86_64.iso.asc

[LefC]

Hi,

I am trying to verify my download and i am in the final step where i have to do

gpg -v --verify Qubes-RX-x86_64.iso.asc Qubes-RX-x86_64.iso

to verify the ISO file. The instructions claim that i can download the .asc signature and this is where i am really stuck. The download link just leads me to another page with the raw PGP signature-no download. I don't know how to import it to gpg to do the verification. Do i have to transform it to a .asc file or what?? I am extremely confused.

Appreciate any advice.

[unman]

You dont need to import that signature in to gpg. You *do* need to
download and import the PGP key.
On the page with the signature, save it as plain text. (If you save it
as html page, you will have to edit the file to rekove HTML cruft).
The saved page will be named Qubes-RX-x86_64.iso.asc , and you can then
verify the download with that file.

Dont forget to get a copy of the Master Signing key and check it -
details as https://www.qubes-os.org/security/verifying-signatures/

[LefC]

Thank you very much!! For the simple, quick and efficient reply.