* emacs-25.2-x86_64.zip signed by ??? @ 2017-05-19 9:47 Rostislav Svoboda 2017-05-19 13:35 ` Nicolas Petton 0 siblings, 1 reply; 5+ messages in thread From: Rostislav Svoboda @ 2017-05-19 9:47 UTC (permalink / raw) To: emacs-devel@gnu.org Development; +Cc: phillip.lord, petton.nicolas Hi, according to Download & installation instructions from https://www.gnu.org/software/emacs/download.html#windows the emacs-25.2-x86_64.zip should be signed by Nicolas Petton. To me (if my interpretation of gpg --verify is correct) it looks likes it is signed by Phillip Lord. Would you please clarify this to me, or correct the instructions? Thanks Bost $ wget https://ftp.gnu.org/gnu/gnu-keyring.gpg && gpg --import gnu-keyring.gpg gpg: starting migration from earlier GnuPG versions gpg: porting secret keys from '/home/rsvoboda/.gnupg/secring.gpg' to gpg-agent gpg: migration succeeded gpg: key 09DF2DC9BE216115: "Francesco Potortì <pot@potorti.it>" not changed [..] gpg: key 233587A47C207910: public key "Nicolas Petton <petton.nicolas@gmail.com>" imported [..] gpg: key 969C3BE389DDA6EB: public key "Shigio YAMAGUCHI <shigio@gnu.org>" imported gpg: Total number processed: 506 gpg: skipped PGP-2 keys: 10 gpg: imported: 131 gpg: unchanged: 355 gpg: new user IDs: 9 gpg: new subkeys: 19 gpg: new signatures: 689 gpg: no ultimately trusted keys found $ wget http://gnu.xl-mirror.nl/emacs/windows/emacs-25.2-x86_64.zip [..] $ wget http://gnu.xl-mirror.nl/emacs/windows/emacs-25.2-x86_64.zip.sig [..] $ gpg --verify emacs-25.2-x86_64.zip.sig emacs-25.2-x86_64.zip gpg: Signature made Di 25 Apr 2017 18:19:43 CEST gpg: using RSA key AC6DD3FFD1D046BD gpg: Good signature from "Phillip Lord <phillip.lord@newcastle.ac.uk>" [unknown] gpg: aka "Phillip Lord <phillip.lord@russet.org.uk>" [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 8493 0FFB 79B6 45F7 DEA2 9AD0 AC6D D3FF D1D0 46BD ^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: emacs-25.2-x86_64.zip signed by ??? 2017-05-19 9:47 emacs-25.2-x86_64.zip signed by ??? Rostislav Svoboda @ 2017-05-19 13:35 ` Nicolas Petton [not found] ` <WM!d436413a44834eb761b39e5005b964f317f902ceb1f5fd8f6e6c68cf791460c0ee0547edd97e9a4662c1b4e6b0950b52!@mailhub-mx2.ncl.ac.uk> 0 siblings, 1 reply; 5+ messages in thread From: Nicolas Petton @ 2017-05-19 13:35 UTC (permalink / raw) To: Rostislav Svoboda, emacs-devel@gnu.org Development Cc: phillip.lord, petton.nicolas [-- Attachment #1: Type: text/plain, Size: 468 bytes --] Rostislav Svoboda <rostislav.svoboda@gmail.com> writes: > Hi, Hi Rostislav, > according to Download & installation instructions from > https://www.gnu.org/software/emacs/download.html#windows the > emacs-25.2-x86_64.zip should be signed by Nicolas Petton. To me (if my > interpretation of gpg --verify is correct) it looks likes it is signed by > Phillip Lord. I'm signing the release tarballs, but the Windows builds are done and signed by Phillip. Cheers, Nico [-- Attachment #2: signature.asc --] [-- Type: application/pgp-signature, Size: 472 bytes --] ^ permalink raw reply [flat|nested] 5+ messages in thread
[parent not found: <WM!d436413a44834eb761b39e5005b964f317f902ceb1f5fd8f6e6c68cf791460c0ee0547edd97e9a4662c1b4e6b0950b52!@mailhub-mx2.ncl.ac.uk>]
* Re: emacs-25.2-x86_64.zip signed by ??? [not found] ` <WM!d436413a44834eb761b39e5005b964f317f902ceb1f5fd8f6e6c68cf791460c0ee0547edd97e9a4662c1b4e6b0950b52!@mailhub-mx2.ncl.ac.uk> @ 2017-05-22 14:53 ` Phillip Lord 2017-05-22 15:37 ` Nicolas Petton 0 siblings, 1 reply; 5+ messages in thread From: Phillip Lord @ 2017-05-22 14:53 UTC (permalink / raw) To: Nicolas Petton Cc: phillip.lord, petton.nicolas, Rostislav Svoboda, emacs-devel@gnu.org Development Nicolas Petton <nicolas@petton.fr> writes: > Rostislav Svoboda <rostislav.svoboda@gmail.com> writes: > >> Hi, > > Hi Rostislav, > >> according to Download & installation instructions from >> https://www.gnu.org/software/emacs/download.html#windows the >> emacs-25.2-x86_64.zip should be signed by Nicolas Petton. To me (if my >> interpretation of gpg --verify is correct) it looks likes it is signed by >> Phillip Lord. > > I'm signing the release tarballs, but the Windows builds are done and > signed by Phillip. Can we update the website? If I remember we were going to do this before, but I was in the process of changing my key. Phil ^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: emacs-25.2-x86_64.zip signed by ??? 2017-05-22 14:53 ` Phillip Lord @ 2017-05-22 15:37 ` Nicolas Petton 2017-05-22 16:08 ` Rostislav Svoboda 0 siblings, 1 reply; 5+ messages in thread From: Nicolas Petton @ 2017-05-22 15:37 UTC (permalink / raw) To: Phillip Lord Cc: phillip.lord, petton.nicolas, Rostislav Svoboda, emacs-devel@gnu.org Development [-- Attachment #1: Type: text/plain, Size: 237 bytes --] Phillip Lord <phillip.lord@russet.org.uk> writes: > Can we update the website? If I remember we were going to do this > before, but I was in the process of changing my key. Sure thing! Can you give the your fingerprint? Cheers, Nico [-- Attachment #2: signature.asc --] [-- Type: application/pgp-signature, Size: 472 bytes --] ^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: emacs-25.2-x86_64.zip signed by ??? 2017-05-22 15:37 ` Nicolas Petton @ 2017-05-22 16:08 ` Rostislav Svoboda 0 siblings, 0 replies; 5+ messages in thread From: Rostislav Svoboda @ 2017-05-22 16:08 UTC (permalink / raw) To: Nicolas Petton Cc: Phillip Lord, emacs-devel@gnu.org Development, nicolas petton, Phillip Lord Oh, BTW is it necessary to have the name of the person building the tarball or zip file on the website or anywhere else? I mean, it doesn't play any role if the content comes from friend or foe if the checksum is the same as the one on the installation website, right? Cheers Bost 2017-05-22 17:37 GMT+02:00 Nicolas Petton <nicolas@petton.fr>: > Phillip Lord <phillip.lord@russet.org.uk> writes: > >> Can we update the website? If I remember we were going to do this >> before, but I was in the process of changing my key. > > Sure thing! > > Can you give the your fingerprint? > > Cheers, > Nico ^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2017-05-22 16:08 UTC | newest] Thread overview: 5+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2017-05-19 9:47 emacs-25.2-x86_64.zip signed by ??? Rostislav Svoboda 2017-05-19 13:35 ` Nicolas Petton [not found] ` <WM!d436413a44834eb761b39e5005b964f317f902ceb1f5fd8f6e6c68cf791460c0ee0547edd97e9a4662c1b4e6b0950b52!@mailhub-mx2.ncl.ac.uk> 2017-05-22 14:53 ` Phillip Lord 2017-05-22 15:37 ` Nicolas Petton 2017-05-22 16:08 ` Rostislav Svoboda
Code repositories for project(s) associated with this external index https://git.savannah.gnu.org/cgit/emacs.git https://git.savannah.gnu.org/cgit/emacs/org-mode.git This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.