From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Ali Elshishini Newsgroups: gmane.emacs.bugs Subject: bug#55666: enhancement request - SHA-256 for emacs downloads Date: Sat, 28 May 2022 19:17:49 +0000 Message-ID: References: <875ylr8cmq.fsf@gnus.org> <835ylrnor3.fsf@gnu.org> <83czfymbd0.fsf@gnu.org> <83k0a5lbob.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="_000_DM5PR19MB4680165E6782DC281125C887DBDB9DM5PR19MB4680namp_" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="38667"; mail-complaints-to="usenet@ciao.gmane.io" Cc: "larsi@gnus.org" , "corwin@bru.st" , "55666@debbugs.gnu.org" <55666@debbugs.gnu.org> To: Eli Zaretskii Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Sat May 28 21:18:13 2022 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nv1wy-0009ue-H0 for geb-bug-gnu-emacs@m.gmane-mx.org; Sat, 28 May 2022 21:18:12 +0200 Original-Received: from localhost ([::1]:55518 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nv1ww-0002dz-W2 for geb-bug-gnu-emacs@m.gmane-mx.org; Sat, 28 May 2022 15:18:11 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:56610) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nv1wo-0002ax-3T for bug-gnu-emacs@gnu.org; Sat, 28 May 2022 15:18:02 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]:45015) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1nv1wn-0001Uc-RS for bug-gnu-emacs@gnu.org; Sat, 28 May 2022 15:18:01 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1nv1wn-00054T-Ne for bug-gnu-emacs@gnu.org; Sat, 28 May 2022 15:18:01 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Ali Elshishini Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sat, 28 May 2022 19:18:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 55666 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: wontfix Original-Received: via spool by 55666-submit@debbugs.gnu.org id=B55666.165376548019486 (code B ref 55666); Sat, 28 May 2022 19:18:01 +0000 Original-Received: (at 55666) by debbugs.gnu.org; 28 May 2022 19:18:00 +0000 Original-Received: from localhost ([127.0.0.1]:38912 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nv1wm-00054E-8P for submit@debbugs.gnu.org; Sat, 28 May 2022 15:18:00 -0400 Original-Received: from mail-co1nam11olkn2087.outbound.protection.outlook.com ([40.92.18.87]:19168 helo=NAM11-CO1-obe.outbound.protection.outlook.com) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nv1wi-00053y-LG for 55666@debbugs.gnu.org; Sat, 28 May 2022 15:17:58 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=DP7U8s5FADlOSCQXQYo8LiFzRp7AzPv086UbL3w2BnGDH5OlmIgmrlKURftzwiri+vSTYXzlY7er13YgSc8uWMcCV3JTXtpFDXzCJRSceEdHiK2gkzioojZ+q2SJ9LzV/TnfFlI1lKxana3+sfsbHGWGYo6F0VI7R7hBBKWg9c2zZMb+brBM+0QQnpVwEt6xOhaZ3ffEuiqw1qGT9CRWgTBIYeNJlcVMzhXMMpVclDXIYS76jLOg3Pb7fBeQLiHi+1L04HYJ2RfVfJGXtfzVYwzOe9eevgt4cOkJCYbro2E/In4B1oiqcOH0ZbqysnhF5ljKztWqd2yvuAG2L+uz2w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Zah9nR4vRECawtv2kNH/XHyXhePgujeDFc1bARMHryM=; b=biAiUzVsFaR43E71oSoO5VE0Rwo3n4+iOdSL1r3efXIjanVsOHhh4Av9j0J17+FwinKoDnjTyVE2HOEzqYf/Vv5uIe0OjCdHgRnPzxLYFquEQR9r9AJlueU16LgjC68IcIZsTUxeguW67ZIsBLQuHB0lYJONGb81cwi7maOaaykOC0F6SvcjTurd3IEB/MyoEl0V6DyyASPdBUW9jH7Q3PlXeZfe5YVsqXAQfJfxw5e71Cg8XbateA6YiOgrZhOR8e71aGZItimE5K+fU5Y+t1Xh67Uz97OopFHJirwGL04MAfi/2M2SSvVv01wIqVUqBhmvF3vJ9TogPyQ/uKFEYA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Zah9nR4vRECawtv2kNH/XHyXhePgujeDFc1bARMHryM=; b=W3IhkByHSgZa8EvWTmwecxeq4+83nlvWWWsKoEncLMn90ac2u9HXNhZ+nWO7wDKBGFFmdsCJEW5tK43rgzTBtK9xReFR8UCtZ2vys/J9+UUofwOyXbTpI0LPDPLTjyvIEgjHbJNFtj8MuH13NlKuw0fegnhTKFqzLoxAJUUu6LB7Cr7cRUJauoSv9sKIUr748HQZvrnpzCeBbTIU2+CLSTp5TslI+1YGUV5EorlZ7A6O4LnWaF40PtDGr6SsgBbPProD/VkaUxnIJi2jY1ELh8bwQi2HxldbcsEIm6UT+BiipvYL3Yx6U3uPGciGosJHx3JPXoi7aIdUwwUQ61KvCQ== Original-Received: from DM5PR19MB4680.namprd19.prod.outlook.com (2603:10b6:4:a7::20) by PH7PR19MB5583.namprd19.prod.outlook.com (2603:10b6:510:136::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5293.16; Sat, 28 May 2022 19:17:49 +0000 Original-Received: from DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::f913:d2e8:5703:a618]) by DM5PR19MB4680.namprd19.prod.outlook.com ([fe80::f913:d2e8:5703:a618%7]) with mapi id 15.20.5293.017; Sat, 28 May 2022 19:17:49 +0000 Thread-Topic: bug#55666: enhancement request - SHA-256 for emacs downloads Thread-Index: AQHYcShLG5y9osb93ki3yxEv0JCLXa0yj2HSgAAY91+AAM0Q6IAAXPtBgAC27iWAACBmDYAAAmXZ In-Reply-To: <83k0a5lbob.fsf@gnu.org> Accept-Language: en-CA, en-US Content-Language: en-CA suggested_attachment_session_id: d91b4b7d-3d8f-66a2-c005-7a34ab9f5f58 x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [JlZbrUwGvYAPzoxnQKaDkd1efl+PONiN8ZmCLOLKZpw=] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 523924fb-9423-4f0d-3c9a-08da40dec12f x-ms-traffictypediagnostic: PH7PR19MB5583:EE_ x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: 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 v8+ZWYXjT/uUPQmD9FmazpuKWyrlNbC7MQiQAEZR0WOYEIybidGntrbAnaZJXozK35QyCIomicuXF3OKJzl19gdaVqUhKIEd5a X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM5PR19MB4680.namprd19.prod.outlook.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: 523924fb-9423-4f0d-3c9a-08da40dec12f X-MS-Exchange-CrossTenant-originalarrivaltime: 28 May 2022 19:17:49.3893 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR19MB5583 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.io gmane.emacs.bugs:233275 Archived-At: --_000_DM5PR19MB4680165E6782DC281125C887DBDB9DM5PR19MB4680namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Thanks All But again, verifying the signature on windows doesn't seem to instill confi= dence at all Corvwin doesnt have a certified key I am not a certificate expert, so I dont know how all of this works So, I still hope Corwin or the Windows Binaries volunteers will still be a= ble to provide SHA-256 hashes PS C:\downloads> C:\"Program Files (x86)"\GnuPG\bin\gpg --keyserver keyserv= er.ubuntu.com --recv-keys ECE77CF417C76C1ACFCE7C2B5B6135511580F007 gpg: key 5B6135511580F007: public key "Corwin Brust " import= ed gpg: Total number processed: 1 gpg: imported: 1 PS C:\downloads> C:\"Program Files (x86)"\GnuPG\bin\gpg --verify .\emacs-28= .1.zip.sig gpg: assuming signed data in '.\emacs-28.1.zip' gpg: Signature made 2022-04-21 4:11:30 PM Eastern Daylight Time gpg: using RSA key ECE77CF417C76C1ACFCE7C2B5B6135511580F007 gpg: Good signature from "Corwin Brust " [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owne= r. Primary key fingerprint: ECE7 7CF4 17C7 6C1A CFCE 7C2B 5B61 3551 1580 F007 Regards Ali ________________________________ From: Eli Zaretskii Sent: May 28, 2022 3:06 PM To: Ali Elshishini Cc: corwin@bru.st ; larsi@gnus.org ; 55666@d= ebbugs.gnu.org <55666@debbugs.gnu.org> Subject: Re: bug#55666: enhancement request - SHA-256 for emacs downloads > From: Ali Elshishini > CC: "larsi@gnus.org" , "55666@debbugs.gnu.org" > <55666@debbugs.gnu.org> > Date: Sat, 28 May 2022 17:14:26 +0000 > > Also can you please share your version of this command > > gpg --keyserver keyserver.ubuntu.com --recv-keys 17E90D521672C04631B1183E= E78DAE0F3115E06B That's easy: you need to use the correct key signature. The signature is shown on the download page: ECE7 7CF4 17C7 6C1A CFCE 7C2B 5B61 3551 1580 F007 --_000_DM5PR19MB4680165E6782DC281125C887DBDB9DM5PR19MB4680namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Thanks All

But again, verifying the signature on windows doesn't seem to instill confi= dence at all
Corvwin  doesnt have a certified key 
I am not a certificate expert, so I dont know how all of this works 
So,  I still hope Corwin or the Windows Binaries volunteers will still= be able to provide 
SHA-256 hashes 

PS C:\downloads> C:\"Program Files (x86)"\GnuPG\bin\gpg --keys= erver keyserver.ubuntu.com --recv-keys ECE77CF417C76C1ACFCE7C2B5B6135511580= F007
gpg: key 5B6135511580F007: public key "Corwin Brust <corwin@br= u.st>" imported
gpg: Total number processed: 1
gpg:               imported: 1

PS C:\downloads> C:\"Program Files (x86)"\GnuPG\bin\gpg -= -verify .\emacs-28.1.zip.sig
gpg: assuming signed data in '.\emacs-28.1.zip'
gpg: Signature made 2022-04-21 4:11:30 PM Eastern Daylight Time
gpg:                using RSA = key ECE77CF417C76C1ACFCE7C2B5B6135511580F007
gpg: Good signature from "Corwin Brust <corwin@bru.st>"= ; [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the= signature belongs to the owner.
Primary key fingerprint: ECE7 7CF4 17C7 6C1A CFCE  7C2B 5B61 3551 1580= F007


Regards
Ali 
From:<= /b> Eli Zaretskii <eliz@gnu.org>
Sent: May 28, 2022 3:06 PM
To: Ali Elshishini <shishini@outlook.com>
Cc: corwin@bru.st <corwin@bru.st>; larsi@gnus.org <larsi@gn= us.org>; 55666@debbugs.gnu.org <55666@debbugs.gnu.org>
Subject: Re: bug#55666: enhancement request - SHA-256 for emacs down= loads
 
> From: Ali Elshishini <shishini@outlook.com= >
> CC: "larsi@gnus.org" <larsi@gnus.org>, "55666@deb= bugs.gnu.org"
>        <55666@debbugs.gnu.org>= ;
> Date: Sat, 28 May 2022 17:14:26 +0000
>
> Also can you please share your version of this command
>
> gpg --keyserver keyserver.ubuntu.com --recv-keys 17E90D521672C04631B11= 83EE78DAE0F3115E06B

That's easy: you need to use the correct key signature.  The signature=
is shown on the download page:

   ECE7 7CF4 17C7 6C1A CFCE 7C2B 5B61 3551 1580 F007

--_000_DM5PR19MB4680165E6782DC281125C887DBDB9DM5PR19MB4680namp_--