# How to verify the integrity of julia download?

**URL:** <https://discourse.julialang.org/t/how-to-verify-the-integrity-of-julia-download/61335>\
**Category:** New to Julia\
**Tags:** question\
**Created:** [May 18, 2021, 12:35am UTC](https://discourse.julialang.org/t/how-to-verify-the-integrity-of-julia-download/61335 "2021-05-18T00:35:34Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![neoflume](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/neoflume/32/25191_2.png) [@neoflume](https://discourse.julialang.org/u/neoflume)\
**Post date:** [May 18, 2021, 12:35am UTC](https://discourse.julialang.org/t/how-to-verify-the-integrity-of-julia-download/61335/1 "2021-05-18T00:35:34Z")

</div>

The problem is I can’t get the public keys.  
Here are my tries:

1. `gpg --keyserver hkp://pgp.mit.edu:80 --recv-key 0x09788F1E`  
output:  
`gpg: keyserver receive failed: No keyserver available`

2. `gpg --auto-key-locate nodefault,wkd --locate-keys pgp-public-keys@pgp.mit.edu`  
output:

```julia
gpg: error retrieving 'pgp-public-keys@pgp.mit.edu' via WKD: No data
gpg: error reading key: No data

```

1. `gpg --keyserver http://pgp.mit.edu:80 --recv-key 0x09788F1E`  
output:

```julia
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0

```

What to do get that key?

---

<div class="post-metadata">

**Author:** ![mkitti](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/mkitti/32/12459_2.png) [@mkitti](https://discourse.julialang.org/u/mkitti)\
**Post date:** [May 18, 2021, 12:45am UTC](https://discourse.julialang.org/t/how-to-verify-the-integrity-of-julia-download/61335/2 "2021-05-18T00:45:00Z")

</div>

Did you see the “Download Verification” section at [Download Julia](https://julialang.org/downloads/) ?

Here’s the direct link to the key:  
[https://julialang.org/assets/juliareleases.asc](https://julialang.org/assets/juliareleases.asc)

---

<div class="post-metadata">

**Author:** ![neoflume](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/neoflume/32/25191_2.png) [@neoflume](https://discourse.julialang.org/u/neoflume)\
**Post date:** [May 18, 2021, 6:40am UTC](https://discourse.julialang.org/t/how-to-verify-the-integrity-of-julia-download/61335/3 "2021-05-18T06:40:44Z")

</div>

~~can you give the exact gpg command to import the key from the file and verify it?~~  
I figured it out. Here’s the output:

```julia
gpgv: Signature made Friday 23 April 2021 11:16:56 PM IST
gpgv: using RSA key 3673DF529D9049477F76B37566E3C7DC03D6E495
gpgv: issuer "buildbot@julialang.org"
gpgv: Good signature from "Julia (Binary signing key) <buildbot@julialang.org>"

```

verification(`gpg --verify julia-1.6.1-linux-x86_64.tar.gz.asc julia-1.6.1-linux-x86_64.tar.gz`) output:

```julia
gpg: Signature made Friday 23 April 2021 11:16:56 PM IST
gpg: using RSA key 3673DF529D9049477F76B37566E3C7DC03D6E495
gpg: issuer "buildbot@julialang.org"
gpg: Good signature from "Julia (Binary signing key) <buildbot@julialang.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 3673 DF52 9D90 4947 7F76 B375 66E3 C7DC 03D6 E495

```