bug#41776: emacs 26.3 for Windows is signed with a Revoked key

bug#41776: emacs 26.3 for Windows is signed with a Revoked key

[Daniel Kill]

[-- Attachment #1: Type: text/plain, Size: 1110 bytes --]

Downloaded:

https://ftp.gnu.org/gnu/emacs/windows/emacs-26/emacs-26.3-x86_64.zip

and

https://ftp.gnu.org/gnu/emacs/windows/emacs-26/emacs-26.3-

x86_64.zip.sig



And ran:

gpg --verify emacs-26.3-x86_64.zip.sig emacs-26.3-x86_64.zip

gpg: Signature made 08/30/19 09:04:16 Eastern Daylight Time

gpg:                using RSA key

84930FFB79B645F7DEA29AD0AC6DD3FFD1D046BD

gpg: Can't check signature: No public key



gpg --receive-keys 84930FFB79B645F7DEA29AD0AC6DD3FFD1D046BD

gpg: key AC6DD3FFD1D046BD: public key "Phillip Lord

<phillip.lord@newcastle.ac.uk>" imported

gpg: Total number processed: 1

gpg:               imported: 1



gpg --list-keys

pubring.kbx

------------------------------------------------

pub   rsa4096 2017-02-26 [SC] [revoked: 2017-02-26]

      84930FFB79B645F7DEA29AD0AC6DD3FFD1D046BD

uid           [ revoked] Phillip Lord <phillip.lord@newcastle.ac.uk>

uid           [ revoked] Phillip Lord <phillip.lord@russet.org.uk>



Thank you,

Daniel Kill
YourWishIsMine@gmail.com<mailto:YourWishIsMine@gmail.com>




[-- Attachment #2: Type: text/html, Size: 5246 bytes --]

bug#41776: emacs 26.3 for Windows is signed with a Revoked key

[Lars Ingebrigtsen]

Daniel Kill <yourwishismine@live.com> writes:

> https://ftp.gnu.org/gnu/emacs/windows/emacs-26/emacs-26.3-x86_64.zip
>
> and
>
> https://ftp.gnu.org/gnu/emacs/windows/emacs-26/emacs-26.3-
>
> x86_64.zip.sig

I tried this with the emacs-27 packages, and that seems to use a new,
non-revoked key:

larsi@xo:~/Downloads$ gpg --verify emacs-27.1-x86_64.zip.sig emacs-27.1-x86_64.zip
gpg: Signature made Tue Aug 25 18:20:23 2020 CEST
gpg:                using RSA key 8E64B119FE4BAC58C767D5ECE095C1A63FB1EAD2
gpg: Good signature from "Phillip Lord <phillip.lord@russet.org.uk>" [unknown]
gpg:                 aka "Phillip Lord <phillip.lord@newcastle.ac.uk>" [unknown]

So I'm going to go ahead and guess that there's not more to be done
here, and I'm closing this bug report.  If there's more that should be
fixed, please respond to the debbugs address and we'll reopen.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no