* bug#11247: Fwd: [gnu.org #745158] Missing public key
[not found] <rt-3.4.5-30514-1334944646-860.745158-6-0@rt.gnu.org>
@ 2012-04-21 1:51 ` Christoph Scholtes
0 siblings, 0 replies; only message in thread
From: Christoph Scholtes @ 2012-04-21 1:51 UTC (permalink / raw)
To: 11247-close; +Cc: fly797, kenyon
The issue with the missing public key in the keyring has apparently been
resolved, see below.
Christoph
-------- Original Message --------
Subject: [gnu.org #745158] Missing public key
Date: Fri, 20 Apr 2012 13:57:27 -0400
From: Ward Vandewege via RT <sysadmin@gnu.org>
Reply-To: sysadmin@gnu.org
Hi Mike,
> Subject: Public key needed to verify precompiled distribution of Emacs
> for Windows emacs-23.4-bin-i386.zip missing from gnu-keyring.gpg.
>
> Apologies if this is not the correct email address for this issue to
> answer this.
>
> After downloading emacs-23.4-bin-i386.zip and emacs-23.4-bin-
> i386.zip.sig from http://ftp.gnu.org/gnu/emacs/windows and loading
> the latest gnu-keyring.gpg from http://ftp.gnu.org/gnu/ with "gpg
> -import", key 597F9E69 doesn't appear to be available even though
> my keyring appears to be up-to-date:
>
> > gpg --verify emacs-23.4-bin-i386.zip.sig emacs-23.4-bin-i386.zip
> gpg: Signature made Sun Feb 5 17:56:50 2012 EST using RSA key ID
> 597F9E69
> gpg: Can't check signature: public key not found
> > gpg --import gnu-keyring.gpg | & egrep
> 'processed|unchanged|597F9E69'
> gpg: 100 keys processed so far
> gpg: 200 keys processed so far
> gpg: 300 keys processed so far
> gpg: Total number processed: 359
> gpg: unchanged: 359
>
> I have successfully checked the signature on the 23.3 version with
> that same gnu-keyring.gpg:
>
> > gpg --verify emacs-23.3-bin-i386.zip.sig emacs-23.3-bin-i386.zip
> gpg: Signature made Thu Mar 10 06:32:55 2011 EST using DSA key ID
> FBD57530
> gpg: Good signature from "Sean Sieger
> <sean.sieger@gmail.com<mailto:sean.sieger@gmail.com>>"
> gpg: WARNING: This key is not certified with a trusted signature!
> gpg: There is no indication that the signature belongs to the
> owner.
> Primary key fingerprint: 5E02 0890 E767 ABFA 369E F830 159D 9343 FBD5
> 7530
>
> Thanks for any help you can provide,
Thanks for letting us know. The cron job that updates the gnu-keyring
file was not running due to a configuration error. That has now been
resolved, so you should be able to verify the release at this time.
Thanks,
Ward.
--
Ward Vandewege | CTO, Free Software Foundation
GPG Key: 25F774AB | http://identi.ca/cure | http://fsf.org/blogs/RSS
^ permalink raw reply [flat|nested] only message in thread