"Getting SIGNATURE NOT FOUND"
Installing with 'yay' works on my machine (Big Linux)...
$ yay -S librewolf-bin ........... " :: (1/1) Parsing SRCINFO: librewolf-bin gpg: error reading key: No public key :: PGP keys need importing: -> 662E3CDD6FE329002D0CA5BB40339DD82B12EF16, required by: librewolf-bin :: Import? [Y/n] y :: Importing keys with gpg... gpg: key 40339DD82B12EF16: public key "LibreWolf Maintainers gpg@librewolf.net" imported gpg: Total number processed: 1"
Pinned Comments
lsf commented on 2021-11-10 12:14 (UTC) (edited on 2023-04-17 07:18 (UTC) by lsf)
https://wiki.archlinux.org/title/Arch_User_Repository#Acquire_a_PGP_public_key_if_needed
gpg --keyserver hkp://keyserver.ubuntu.com --search-keys 031F7104E932F7BD7416E7F6D2845E1305D6E801
/edit: starting with 112.0-1, the binaries are signed with the maintainers shared key, so
gpg --keyserver hkp://keyserver.ubuntu.com --search-keys 662E3CDD6FE329002D0CA5BB40339DD82B12EF16
should do the trick instead. I've also signed the key with the previously used key, so you have at least some guarantee that it's not a malicious attack :)