bug-gnu-emacs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

bug#11247: Fwd: [gnu.org #745158] Missing public key


From: Christoph Scholtes
Subject: bug#11247: Fwd: [gnu.org #745158] Missing public key
Date: Fri, 20 Apr 2012 19:51:11 -0600
User-agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20120327 Thunderbird/11.0.1

The issue with the missing public key in the keyring has apparently been resolved, see below.

Christoph

-------- Original Message --------
Subject: [gnu.org #745158] Missing public key
Date: Fri, 20 Apr 2012 13:57:27 -0400
From: Ward Vandewege via RT <address@hidden>
Reply-To: address@hidden


Hi Mike,

Subject: Public key needed to verify precompiled distribution of Emacs
   for Windows emacs-23.4-bin-i386.zip missing from gnu-keyring.gpg.

Apologies if this is not the correct email address for this issue to
   answer this.

After downloading emacs-23.4-bin-i386.zip and emacs-23.4-bin-
   i386.zip.sig from http://ftp.gnu.org/gnu/emacs/windows and loading
   the latest gnu-keyring.gpg from http://ftp.gnu.org/gnu/ with "gpg
   -import", key 597F9E69 doesn't appear to be available even though
   my keyring appears to be up-to-date:

> gpg --verify emacs-23.4-bin-i386.zip.sig emacs-23.4-bin-i386.zip
gpg: Signature made Sun Feb  5 17:56:50 2012 EST using RSA key ID
   597F9E69
gpg: Can't check signature: public key not found
> gpg --import gnu-keyring.gpg | & egrep
   'processed|unchanged|597F9E69'
gpg: 100 keys processed so far
gpg: 200 keys processed so far
gpg: 300 keys processed so far
gpg: Total number processed: 359
gpg:              unchanged: 359

I have successfully checked the signature on the 23.3 version with
   that same gnu-keyring.gpg:

> gpg --verify emacs-23.3-bin-i386.zip.sig emacs-23.3-bin-i386.zip
gpg: Signature made Thu Mar 10 06:32:55 2011 EST using DSA key ID
   FBD57530
gpg: Good signature from "Sean Sieger
   <address@hidden<mailto:address@hidden>>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the
   owner.
Primary key fingerprint: 5E02 0890 E767 ABFA 369E  F830 159D 9343 FBD5
   7530

Thanks for any help you can provide,

Thanks for letting us know. The cron job that updates the gnu-keyring
file was not running due to a configuration error. That has now been
resolved, so you should be able to verify the release at this time.

Thanks,
Ward.

--
Ward Vandewege | CTO, Free Software Foundation
GPG Key: 25F774AB | http://identi.ca/cure | http://fsf.org/blogs/RSS






reply via email to

[Prev in Thread] Current Thread [Next in Thread]