From: "ISHIKAWA,chiaki" <ishikawa@yk.rim.or.jp>
To: help-gnu-emacs@gnu.org
Subject: Signing key has expired for Emacs for windows zip archive (?)
Date: Wed, 10 Jun 2020 20:32:48 +0900 [thread overview]
Message-ID: <c91721f3-a5ed-1b44-728d-19a2f03cfe8e@yk.rim.or.jp> (raw)
Hi,
I tried to download Emacs for Windows, based on the description of
https://www.gnu.org/software/emacs/documentation.html
Unfortunately, it seems that the signing key for the zip archive either
has expired (or revoked?)
or worse some serious issue might have crept in.
The desription:
Windows
GNU Emacs for Windows can be downloaded from a nearby GNU mirror
<http://ftpmirror.gnu.org/emacs/windows>; or the main GNU FTP server
<http://ftp.gnu.org/gnu/emacs/windows/>.
Unzip the zip file preserving the directory structure, and run
|bin\runemacs.exe|. Alternatively, create a desktop shortcut to
|bin\runemacs.exe|, and start Emacs by double-clicking on that
shortcut's icon.
The Windows binaries are signed by Phillip Lord |8E64 B119 FE4B AC58
C767 D5EC E095 C1A6 3FB1 EAD2|.
Well, I got the following error when I tried to verify the integrity of
the archive.
I could not figure out how to change the gpg's output changed into
English, but
it says the key was revoked by the owner.
gpg: 08/30/19 22:04:16 東京 (標準時)に施された署名
gpg: RSA鍵84930FFB79B645F7DEA29AD0AC6DD3FFD1D046BDを使用
gpg: "Phillip Lord <phillip.lord@newcastle.ac.uk>"からの正しい署名
[期限切れ]
gpg: 別名"Phillip Lord <phillip.lord@russet.org.uk>" [期限切れ]
gpg: *警告*: この鍵は所有者によって失効されています!
gpg: 署名が偽物なこともある、ということです。
gpg: 失効理由: 理由は指定されていません
gpg: 失効のコメント: Revocation Certification produced at generation time
gpg: 注意: この鍵は期限切れです!
主鍵フィンガープリント: 8493 0FFB 79B6 45F7 DEA2 9AD0 AC6D D3FF D1D0 46BD
I am not sure what is going on, and could not resolve the issue after
trying to update the key, etc.
Note that the "8E64 B119 ..." is different from the GPG's message. It is
possible that the old archive signed in August was
signed with a different key, but somehow when I looked around "I got
this "8493 0FFB ..." fingerprint.
I think whoever maintains the archive ought to be aware of the issue.
TIA
Chiaki
next reply other threads:[~2020-06-10 11:32 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-06-10 11:32 ISHIKAWA,chiaki [this message]
2020-06-10 12:57 ` Signing key has expired for Emacs for windows zip archive (?) Jakub Jankiewicz
2020-06-22 14:09 ` Phillip Lord
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=c91721f3-a5ed-1b44-728d-19a2f03cfe8e@yk.rim.or.jp \
--to=ishikawa@yk.rim.or.jp \
--cc=help-gnu-emacs@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/emacs.git
https://git.savannah.gnu.org/cgit/emacs/org-mode.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.