From mboxrd@z Thu Jan 1 00:00:00 1970 From: Thomas Danckaert Subject: Re: wrong key used for signing Date: Wed, 29 Mar 2017 09:55:58 +0200 (CEST) Message-ID: <20170329.095558.467722765658034015.post@thomasdanckaert.be> References: <20170328.102506.696688042063031627.post@thomasdanckaert.be> <8760itvldi.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> <87y3vptuxw.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> Mime-Version: 1.0 Content-Type: Multipart/Signed; protocol="application/pgp-signature"; micalg=pgp-sha256; boundary="--Security_Multipart0(Wed_Mar_29_09_55_58_2017_035)--" Content-Transfer-Encoding: 7bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:33874) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ct8Sx-0007cf-3s for guix-devel@gnu.org; Wed, 29 Mar 2017 03:56:31 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ct8St-0006em-74 for guix-devel@gnu.org; Wed, 29 Mar 2017 03:56:27 -0400 Received: from s02-out.spamexperts.axc.nl ([185.175.200.125]:59293) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1ct8Ss-0006cc-UO for guix-devel@gnu.org; Wed, 29 Mar 2017 03:56:23 -0400 In-Reply-To: <87y3vptuxw.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: mbakke@fastmail.com Cc: guix-devel@gnu.org ----Security_Multipart0(Wed_Mar_29_09_55_58_2017_035)-- Content-Type: Multipart/Mixed; boundary="--Next_Part(Wed_Mar_29_09_55_58_2017_502)--" Content-Transfer-Encoding: 7bit ----Next_Part(Wed_Mar_29_09_55_58_2017_502)-- Content-Type: Text/Plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit (now actually including the signature... sigh) From: Marius Bakke Subject: Re: wrong key used for signing Date: Tue, 28 Mar 2017 15:03:23 +0200 >> If you can send a signed message (using key D77D54FD according to >> my >> books) containing the public key of the key used to sign these >> commits >> (so they can be verified), I think that is proof enough. Assuming >> you >> admit to making them, of course :-) > > To be clear, simply "vouching" for the commits in a signed message > is > good enough for me. It would be good to have the signing key for > future > reference, but if you don't want to disclose it I'm fine with that. As Leo found out, it's just an old key (that I didn't intend to use anymore, I should probably just revoke it). For now, I signed it with the new key (find it here: http://http-keys.gnupg.net/pks/lookup?search=0x91E12B08&op=vindex). For sake of completeness: I vouch for the commits referenced in the attached log. Thomas ----Next_Part(Wed_Mar_29_09_55_58_2017_502)-- Content-Type: Text/Plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="commit.log" commit e1abe244f3810e5a1bb82ed70c2290e54d87ac95 Author: Thomas Danckaert Date: Fri Mar 24 14:16:54 2017 +0100 gnu: libreoffice: Update to 5.3.1.2. * gnu/packages/libreoffice.scm (libreoffice): Update to 5.3.1.2. [inputs]: Add libstaroffice and libzmf. [arguments]: Remove reference to removed patch; unpack xmlsec 1.2.23 tarball. (xmlsec-src-libreoffice): Update to version 1.2.23 tarball. commit 5dc2875fa279739e79c3ea7bc0bbd85814c25dcc Author: Thomas Danckaert Date: Fri Mar 24 13:57:18 2017 +0100 gnu: orcus: Update to 0.12.1. * gnu/packages/libreoffice.scm (orcus): Update to 0.12.1. [inputs]: Add python. commit 65cb686e887d8e6311f48c716f8fd29d409db5d0 Author: Thomas Danckaert Date: Fri Mar 24 13:53:56 2017 +0100 gnu: libetonyek: Update to 0.1.6. * gnu/packages/libreoffice.scm (libetonyek): Update to 0.1.6. [arguments]: Add phase 'autoreconf, because configure.ac is patched. Add configure flag "--with-mdds=1.2". [inputs]: Add liblangtag. [native-inputs]: Add autoconf and automake. * gnu/packages/patches/libetonyek-build-with-mdds-1.2.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. commit c2afb00f1145e136d0a97632cbd0a8dc3ccc2ca8 Author: Thomas Danckaert Date: Fri Mar 24 13:37:57 2017 +0100 gnu: Add libstaroffice. * gnu/packages/libreoffice.scm (libstaroffice): New variable. commit 4e70c654d52c0d93069f8ceec0face6f24cb249e Author: Thomas Danckaert Date: Fri Mar 24 12:25:29 2017 +0100 gnu: ixion: Update to 0.12.2. * gnu/packages/libreoffice.scm (ixion): Update to 0.12.2. [inputs]: Replace python-2 by python. commit 9adf830916a244c857187be02b18b25603551781 Author: Thomas Danckaert Date: Fri Mar 24 12:19:22 2017 +0100 gnu: mdds: Upgrade to 1.2.2. * gnu/packages/boost.scm (mdds): Upgrade to 1.2.2. commit 5bcb40fc37b065672c3a88811dfb170a6d44908a Author: Thomas Danckaert Date: Fri Mar 24 11:58:22 2017 +0100 gnu: Add libzmf. * gnu/packages/libreoffice.scm (libzmf): New Variable. ----Next_Part(Wed_Mar_29_09_55_58_2017_502)---- ----Security_Multipart0(Wed_Mar_29_09_55_58_2017_035)-- Content-Type: application/pgp-signature Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEPSzaWIGcCMKmSdQ9XDsGTHJKVyYFAljbaI4ACgkQXDsGTHJK VyaFhg/+KMGbV5sb103QxD1vZecpXBx7HMbPMLZaYWOhEjc+jHYz3eUOEEPkG0Dh +SIyJc3Jb/iIhtx+ne3YQeZ5mId2PpJl6HiRrOdyc6lMUc5dExrOo4fCHKTonsf6 ep0KXR8jRz1f2wtBJewxBKuWugWGdL90NmKu23ASjvtn0OIoA8brI4cXFcaQ7KMf AKO/ma+dFXzQ/ObRdaVCZX01OoGPrpgOpKHfm7PCcysmNOSsHeHp5IwfoTHzk+RW DbneMz6lblOpC1B5Qm8SGz1u7BumMKBTSbhimG1ZQIrJ+QeZKIUG09gtH92xHTwL Pz/+6Pvk8F1s8II+vWXS19Wu+L8ldsDFPZostoqu8vHh9xduvpPXCq0he2R0jUQ1 EXStwAcSNRnZs7qUeWFvJXdBLoWPXSrGDttGrsKlbnfCSnRZYR3tP5Q9dnJ6QZPo OA9teJcM+prjWlUKGnbIbn2Mzv7SkyyJP3rzxv433tf/LYlXy/KWkITr63Ryd+Tk OugXXM9koZbzDiKpFJf8MIggNxYYcYCjgWfiDxQ2xxpqAD+6hfwycSnOQ3dz43sz F1x6Suye78HFLZTU89FC73VLeJmamsTGYu0Kj9m8TnQ2o5mXZF+N0ZAyJcFgWECM UxvaWOwmp7t2GNakZ+EfljOzBmdNQAK0BK6LItMIAOvBbJG2rEY= =Vcv6 -----END PGP SIGNATURE----- ----Security_Multipart0(Wed_Mar_29_09_55_58_2017_035)----