[CMake] not sure if I am verifying download correctly: something kooky

[Gavin M2301]

Hi-
 gpg2 --verify cmake-3.14.0-SHA-256.txt.asc cmake-3.14.0-SHA-256.txt
gpg: Signature made Thu, Mar 14, 2019 10:26:24 AM EDT
gpg:                using RSA key C6C265324BBEBDC350B513D02D2CEF1034921684
gpg: Can't check signature: No public key

sha256sum cmake-3.14.0-win64-x64.msi
4cbc62929f313d9890d377fa022753e9e5509e7afa3e16978127b7b2813633cf
*cmake-3.14.0-win64-x64.msi

4cbc62929f313d9890d377fa022753e9e5509e7afa3e16978127b7b2813633cf
cmake-3.14.0-win64-x64.msi

 gpg2--keyid-format long --show-key cmake-3.14.0-SHA-256.txt.asc
-bash: gpg2--keyid-format: command not found

That last one might be because it is a new gpg2 version.

https://serverfault.com/questions/896228/how-to-verify-a-file-using-an-asc-signature-file

So, I got a good sha256sum but can't verify the signature. Per the website,
EC8FEF3A7BFB4EDA
<http://pool.sks-keyservers.net:11371/pks/lookup?op=get&search=0xCBA23971357C2E6590D9EFD3EC8FEF3A7BFB4EDA>

I am wondering if PGP is different than GPG and that is the issue. I don't
think that is the issue though.

Please advise. Thnx. for any assistance: Roboloki







<http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
Virus-free.
www.avg.com
<http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://cmake.org/pipermail/cmake/attachments/20190314/fa93c1a4/attachment-0001.html>