all messages for Emacs-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
From: "ISHIKAWA,chiaki" <ishikawa@yk.rim.or.jp>
To: help-gnu-emacs@gnu.org
Subject: Signing key has expired for Emacs for windows zip archive (?)
Date: Wed, 10 Jun 2020 20:32:48 +0900	[thread overview]
Message-ID: <c91721f3-a5ed-1b44-728d-19a2f03cfe8e@yk.rim.or.jp> (raw)

Hi,

I tried to download Emacs for Windows, based on the description of
https://www.gnu.org/software/emacs/documentation.html

Unfortunately, it seems that the signing key for the zip archive either 
has expired (or revoked?)
or worse some serious issue might have crept in.

The desription:


      Windows

GNU Emacs for Windows can be downloaded from a nearby GNU mirror 
<http://ftpmirror.gnu.org/emacs/windows>; or the main GNU FTP server 
<http://ftp.gnu.org/gnu/emacs/windows/>.
Unzip the zip file preserving the directory structure, and run 
|bin\runemacs.exe|. Alternatively, create a desktop shortcut to 
|bin\runemacs.exe|, and start Emacs by double-clicking on that 
shortcut's icon.

The Windows binaries are signed by Phillip Lord |8E64 B119 FE4B AC58 
C767 D5EC E095 C1A6 3FB1 EAD2|.


Well, I got the following error when I tried to verify the integrity of 
the archive.

I could not figure out how to change the gpg's output changed into 
English, but
it says the key was revoked by the owner.

gpg: 08/30/19 22:04:16 東京 (標準時)に施された署名

gpg: RSA鍵84930FFB79B645F7DEA29AD0AC6DD3FFD1D046BDを使用

gpg: "Phillip Lord <phillip.lord@newcastle.ac.uk>"からの正しい署名 
[期限切れ]

gpg: 別名"Phillip Lord <phillip.lord@russet.org.uk>" [期限切れ]

gpg: *警告*: この鍵は所有者によって失効されています!

gpg: 署名が偽物なこともある、ということです。

gpg: 失効理由: 理由は指定されていません

gpg: 失効のコメント: Revocation Certification produced at generation time

gpg: 注意: この鍵は期限切れです!

主鍵フィンガープリント: 8493 0FFB 79B6 45F7 DEA2 9AD0 AC6D D3FF D1D0 46BD

I am not sure what is going on, and could not resolve the issue after 
trying to update the key, etc.
Note that the "8E64 B119 ..." is different from the GPG's message. It is 
possible that the old archive signed in August was
signed with a different key, but somehow when I looked around "I got 
this "8493 0FFB ..." fingerprint.

I think whoever maintains the archive ought to be aware of the issue.

TIA

Chiaki





             reply	other threads:[~2020-06-10 11:32 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-06-10 11:32 ISHIKAWA,chiaki [this message]
2020-06-10 12:57 ` Signing key has expired for Emacs for windows zip archive (?) Jakub Jankiewicz
2020-06-22 14:09 ` Phillip Lord

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=c91721f3-a5ed-1b44-728d-19a2f03cfe8e@yk.rim.or.jp \
    --to=ishikawa@yk.rim.or.jp \
    --cc=help-gnu-emacs@gnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/emacs.git
	https://git.savannah.gnu.org/cgit/emacs/org-mode.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.