On Sat, 11 May 2019 16:06:49 +0000 Fil Lupin <fillu...@protonmail.com> wrote:
> Hi, Hi, > for information, someone noticed on the forum that signature checking > does not work because of Wolfgang key expiration for replicant 6 > images (see https://redmine.replicant.us/boards/3/topics/15145). It works for me at the time of writing > $ gpg --verify recovery-i9100.img.asc > gpg: assuming signed data in 'recovery-i9100.img' > gpg: Signature made dim. 10 déc. 2017 23:27:45 CET > gpg: using RSA key 0F30D1A02F73F70A6FEE048E5816A24C10757FC4 > gpg: Good signature from "Wolfgang Wiedmeyer <wolfg...@wiedmeyer.de>" > [ultimate] > gpg: aka "Wolfgang Wiedmeyer <w...@wiedmeyer.de>" [ultimate] > gpg: aka "Wolfgang Wiedmeyer <wolf...@wiedmeyer.de>" > [ultimate] Here's Wolfgang key on my computer: > $ gpg --fingerprint 0F30D1A02F73F70A6FEE048E5816A24C10757FC4 > pub rsa4096 2015-02-25 [SC] [expires: 2023-03-15] > 0F30 D1A0 2F73 F70A 6FEE 048E 5816 A24C 1075 7FC4 > uid [ultimate] Wolfgang Wiedmeyer <wolfg...@wiedmeyer.de> > uid [ultimate] Wolfgang Wiedmeyer <w...@wiedmeyer.de> > uid [ultimate] Wolfgang Wiedmeyer <wolf...@wiedmeyer.de> > sub rsa4096 2015-02-25 [E] [expires: 2023-03-15] Refreshing the key should fix it: > $ gpg --refresh-key 0F30D1A02F73F70A6FEE048E5816A24C10757FC4 > gpg: refreshing 1 key from hkps://hkps.pool.sks-keyservers.net > gpg: key 5816A24C10757FC4: 1 signature not checked due to a missing key > gpg: key 5816A24C10757FC4: "Wolfgang Wiedmeyer <wolfg...@wiedmeyer.de>" not > changed > gpg: Total number processed: 1 > gpg: unchanged: 1 That said we will need to revisit our decisions about the gpg keys used by the Replicant project, if possible before the next release, to at least document why we do or did it this way. Denis.
pgpc9eqnPqtz4.pgp
Description: OpenPGP digital signature
_______________________________________________ Replicant mailing list Replicant@osuosl.org https://lists.osuosl.org/mailman/listinfo/replicant