From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.ciao.gmane.io!not-for-mail From: "ISHIKAWA,chiaki" Newsgroups: gmane.emacs.help Subject: Signing key has expired for Emacs for windows zip archive (?) Date: Wed, 10 Jun 2020 20:32:48 +0900 Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Injection-Info: ciao.gmane.io; posting-host="ciao.gmane.io:159.69.161.202"; logging-data="115320"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.9.0 To: help-gnu-emacs@gnu.org Original-X-From: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane-mx.org@gnu.org Wed Jun 10 13:33:19 2020 Return-path: Envelope-to: geh-help-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jiyyt-000Tog-QK for geh-help-gnu-emacs@m.gmane-mx.org; Wed, 10 Jun 2020 13:33:19 +0200 Original-Received: from localhost ([::1]:55888 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jiyys-0001ay-SK for geh-help-gnu-emacs@m.gmane-mx.org; Wed, 10 Jun 2020 07:33:18 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:39776) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jiyyU-0001ap-FT for help-gnu-emacs@gnu.org; Wed, 10 Jun 2020 07:32:54 -0400 Original-Received: from mail116.siriuscloud.jp ([219.118.72.116]:36836 helo=mail06.SiriusCloud.jp) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jiyyS-0005zZ-Vw for help-gnu-emacs@gnu.org; Wed, 10 Jun 2020 07:32:54 -0400 Original-Received: from [192.168.0.5] (M106073032161.v4.enabler.ne.jp [106.73.32.161]) (Authenticated sender: ishikawa@yk.rim.or.jp) by access06.SiriusCloud.jp (Postfix) with ESMTPA id 49hlGR4gZbz67s0 for ; Wed, 10 Jun 2020 20:32:47 +0900 (JST) Authentication-Results: access06.SiriusCloud.jp; dkim=none reason="no signature"; dkim-adsp=none (unprotected policy); dkim-atps=neutral Content-Language: en-US Received-SPF: pass client-ip=219.118.72.116; envelope-from=ishikawa@yk.rim.or.jp; helo=mail06.SiriusCloud.jp X-detected-operating-system: by eggs.gnu.org: First seen = 2020/06/10 07:32:48 X-ACL-Warn: Detected OS = ??? X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: help-gnu-emacs@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Users list for the GNU Emacs text editor List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "help-gnu-emacs" Xref: news.gmane.io gmane.emacs.help:123308 Archived-At: Hi, I tried to download Emacs for Windows, based on the description of https://www.gnu.org/software/emacs/documentation.html Unfortunately, it seems that the signing key for the zip archive either has expired (or revoked?) or worse some serious issue might have crept in. The desription: Windows GNU Emacs for Windows can be downloaded from a nearby GNU mirror ; or the main GNU FTP server . Unzip the zip file preserving the directory structure, and run |bin\runemacs.exe|. Alternatively, create a desktop shortcut to |bin\runemacs.exe|, and start Emacs by double-clicking on that shortcut's icon. The Windows binaries are signed by Phillip Lord |8E64 B119 FE4B AC58 C767 D5EC E095 C1A6 3FB1 EAD2|. Well, I got the following error when I tried to verify the integrity of the archive. I could not figure out how to change the gpg's output changed into English, but it says the key was revoked by the owner. gpg: 08/30/19 22:04:16 東京 (標準時)に施された署名 gpg: RSA鍵84930FFB79B645F7DEA29AD0AC6DD3FFD1D046BDを使用 gpg: "Phillip Lord "からの正しい署名 [期限切れ] gpg: 別名"Phillip Lord " [期限切れ] gpg: *警告*: この鍵は所有者によって失効されています! gpg: 署名が偽物なこともある、ということです。 gpg: 失効理由: 理由は指定されていません gpg: 失効のコメント: Revocation Certification produced at generation time gpg: 注意: この鍵は期限切れです! 主鍵フィンガープリント: 8493 0FFB 79B6 45F7 DEA2 9AD0 AC6D D3FF D1D0 46BD I am not sure what is going on, and could not resolve the issue after trying to update the key, etc. Note that the "8E64 B119 ..." is different from the GPG's message. It is possible that the old archive signed in August was signed with a different key, but somehow when I looked around "I got this "8493 0FFB ..." fingerprint. I think whoever maintains the archive ought to be aware of the issue. TIA Chiaki