FreeBSD Patch question

[V. Jones]

I administer a remote server and want to apply some of the security patches.  (I assume this is the best way to go since I can't go into single-user mode to use CVsup).

I have a couple of questions.  First, I have installed one of the pgp ports to verify the patches.  When I run it, I get this message:

> File 'buffer46.patch.asc' has signature, but with no text.
> Text is assumed to be in file 'buffer46.patch'.
> signature not checked.
>  Signature made 2003/09/17 18:02 GMT
>  key does not meet validity threshold.
 
> WARNING:  Because this public key is not certified with a trusted
> signature, it is not known with high confidence that this public key
> actually belongs to: "(KeyID: 0xCA6CDFB2)".

I guess that I need to do some additional set up to get pgp to validate this file.  Can anyone tell me where to find a howto on this subject or tell me what to do?

Second, Do I have apply each patch, then run make after each patch, or can I apply all the patches and just run make once?

Any other advice or suggestions on updating a remote system would be appreciated.