bug#11247: Fwd: [gnu.org #745158] Missing public key

[Christoph Scholtes]

The issue with the missing public key in the keyring has apparently been 
resolved, see below.

Christoph

-------- Original Message --------
Subject: [gnu.org #745158] Missing public key
Date: Fri, 20 Apr 2012 13:57:27 -0400
From: Ward Vandewege via RT <sysadmin@gnu.org>
Reply-To: sysadmin@gnu.org


Hi Mike,

> Subject: Public key needed to verify precompiled distribution of Emacs
>    for Windows emacs-23.4-bin-i386.zip missing from gnu-keyring.gpg.
>
> Apologies if this is not the correct email address for this issue to
>    answer this.
>
> After downloading emacs-23.4-bin-i386.zip and emacs-23.4-bin-
>    i386.zip.sig from http://ftp.gnu.org/gnu/emacs/windows and loading
>    the latest gnu-keyring.gpg from http://ftp.gnu.org/gnu/ with "gpg
>    -import", key 597F9E69 doesn't appear to be available even though
>    my keyring appears to be up-to-date:
>
> > gpg --verify emacs-23.4-bin-i386.zip.sig emacs-23.4-bin-i386.zip
> gpg: Signature made Sun Feb  5 17:56:50 2012 EST using RSA key ID
>    597F9E69
> gpg: Can't check signature: public key not found
> > gpg --import gnu-keyring.gpg | & egrep
>    'processed|unchanged|597F9E69'
> gpg: 100 keys processed so far
> gpg: 200 keys processed so far
> gpg: 300 keys processed so far
> gpg: Total number processed: 359
> gpg:              unchanged: 359
>
> I have successfully checked the signature on the 23.3 version with
>    that same gnu-keyring.gpg:
>
> > gpg --verify emacs-23.3-bin-i386.zip.sig emacs-23.3-bin-i386.zip
> gpg: Signature made Thu Mar 10 06:32:55 2011 EST using DSA key ID
>    FBD57530
> gpg: Good signature from "Sean Sieger
>    <sean.sieger@gmail.com<mailto:sean.sieger@gmail.com>>"
> gpg: WARNING: This key is not certified with a trusted signature!
> gpg:          There is no indication that the signature belongs to the
>    owner.
> Primary key fingerprint: 5E02 0890 E767 ABFA 369E  F830 159D 9343 FBD5
>    7530
>
> Thanks for any help you can provide,

Thanks for letting us know. The cron job that updates the gnu-keyring
file was not running due to a configuration error. That has now been
resolved, so you should be able to verify the release at this time.

Thanks,
Ward.

--
Ward Vandewege | CTO, Free Software Foundation
GPG Key: 25F774AB | http://identi.ca/cure | http://fsf.org/blogs/RSS