From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.devel Subject: Re: Adding fingerprint to Emacs signature file? Date: Wed, 03 Nov 2021 14:35:00 +0200 Message-ID: <83r1bxifij.fsf@gnu.org> References: Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="19210"; mail-complaints-to="usenet@ciao.gmane.io" Cc: emacs-devel@gnu.org To: Tadeus Prastowo <0x66726565@gmail.com> Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Wed Nov 03 13:36:55 2021 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1miFVe-0004oM-Pe for ged-emacs-devel@m.gmane-mx.org; Wed, 03 Nov 2021 13:36:54 +0100 Original-Received: from localhost ([::1]:42854 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1miFVc-0005e4-VP for ged-emacs-devel@m.gmane-mx.org; Wed, 03 Nov 2021 08:36:53 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:47766) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1miFTr-00055X-BR for emacs-devel@gnu.org; Wed, 03 Nov 2021 08:35:03 -0400 Original-Received: from fencepost.gnu.org ([2001:470:142:3::e]:48902) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1miFTr-0002NY-1n; Wed, 03 Nov 2021 08:35:03 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=References:Subject:In-Reply-To:To:From:Date: mime-version; bh=tCNNnaQc2AES50nEga0FXqMuz+OSg51g9XmeXuHmxeY=; b=btEb7fv9jtOq EdygmrvK95BRXkmgT7wxYcM3NlNIf+l+Ra7DdLpYyKYy/LZcgaSuzrkYs3nd6ub76BNnGknqdLGbV 7fuejmrzLDROzadO99saDgIztKOSV8L/lD1BJIO4xR3n1fcYM3k0PrvQgzIjukx1ShMKioeD4xvoV tfhDVl8w65OiLtBvEsaSn2H4Kk0EmyD12P4ddUDlskGEoKNMHAxtPn6oBiK28uYAtutOXB+nhOgNG MrFy28Qn6pPKYxWxh5nRYPEF5zGVWqmimvO5oVkexchk10FVYwL3/xnpsoRqx3PR2oIzpbkS5zfPf OxavqyeYgOFIKhcE4izAXw==; Original-Received: from [87.69.77.57] (port=4903 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1miFTq-0003ZB-J7; Wed, 03 Nov 2021 08:35:02 -0400 In-Reply-To: (message from Tadeus Prastowo on Wed, 3 Nov 2021 04:50:05 +0100) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:278568 Archived-At: > From: Tadeus Prastowo <0x66726565@gmail.com> > Date: Wed, 3 Nov 2021 04:50:05 +0100 > Cc: emacs-devel@gnu.org > > 2. Test using Emacs. > wget http://mirror.kumi.systems/gnu/emacs/emacs-27.2.tar.xz.sig > http://mirror.kumi.systems/gnu/emacs/emacs-27.2.tar.xz > cat emacs-27.2.tar.xz | gpg --keyserver hkp://keyserver.ubuntu.com:80 > --auto-key-retrieve --verify emacs-27.2.tar.xz.sig - > > The output of the last command is as follows: > gpg: Signature made Thu 25 Mar 2021 12:53:08 PM CET > gpg: using RSA key 91C1262F01EB8D39 > gpg: Can't check signature: No public key You need to do this, I think: gpg --import gnu-keyring.gpg > Would it be possible for future Emacs signature files to have the > issuer fingeprint as well? Since I have not sought through the Emacs > mailing list archive, I am sorry if this issue has been raised in the > past. I was using the procedure provided for all the GNU FTP uploaders. I don't know what your proposal means in terms of changes to that procedure, but I suggest to raise it with the relevant people, at ftp-upload@gnu.org.