On Tue, Feb 21, 2012 at 10:04:12AM -0600, David C. Rankin wrote: > ==> Verifying source file signatures with gpg... > shadow-4.1.5.tar.bz2 ... FAILED (unknown public key 5A0A399AEA7CF5AD) If you would read the complete error message: you're just missing the shadow developers' public key; try importing it with `gpg --recv-key 5A0A399AEA7CF5AD` or configure your gpg.conf to retrieve keys automatically ("keyserver hkp://pgp.mit.edu", "auto-key-locate cert pka ldap keyserver"). -- Mantas Mikulėnas <grawity@xxxxxxxxx>