On 14 April 2015 at 02:06, Nicola Squartini
You are right, I get the same output out of pacman-key.
The reason why I didn't not get the error on my system is that I only use xml-conduit as a dependency for building [haskell-happstack] repo, and apparently the script that does that does not check signatures.
I noticed that the "Last modified" time on xsound is different between the file and its signature:
... haskell-xml-conduit-1.2.3.3-78-x86_64.pkg.tar.xz 2015-04-12 19:23 752K haskell-xml-conduit-1.2.3.3-78-x86_64.pkg.tar.xz.sig 2015-04-12 18:43 96 ...
so probably Magnus had to reupload it for some reason and forgot to sign it.
If you put it in a ticket it'll be easier for me to remember having a look at this later on :) /M -- Magnus Therning OpenPGP: 0xAB4DFBA4 email: magnus@therning.org jabber: magnus@therning.org twitter: magthe http://therning.org/magnus