GNU bug report logs - #41776
emacs 26.3 for Windows is signed with a Revoked key

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 41776 in the body.
You can then email your comments to 41776 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Daniel Kill <yourwishismine <at> live.com>
To: "bug-gnu-emacs <at> gnu.org" <bug-gnu-emacs <at> gnu.org>
Subject: emacs 26.3 for Windows is signed with a Revoked key
Date: Tue, 9 Jun 2020 11:04:39 +0000

[Message part 1 (text/plain, inline)]

Downloaded:

https://ftp.gnu.org/gnu/emacs/windows/emacs-26/emacs-26.3-x86_64.zip

and

https://ftp.gnu.org/gnu/emacs/windows/emacs-26/emacs-26.3-

x86_64.zip.sig



And ran:

gpg --verify emacs-26.3-x86_64.zip.sig emacs-26.3-x86_64.zip

gpg: Signature made 08/30/19 09:04:16 Eastern Daylight Time

gpg:                using RSA key

84930FFB79B645F7DEA29AD0AC6DD3FFD1D046BD

gpg: Can't check signature: No public key



gpg --receive-keys 84930FFB79B645F7DEA29AD0AC6DD3FFD1D046BD

gpg: key AC6DD3FFD1D046BD: public key "Phillip Lord

<phillip.lord <at> newcastle.ac.uk>" imported

gpg: Total number processed: 1

gpg:               imported: 1



gpg --list-keys

pubring.kbx

------------------------------------------------

pub   rsa4096 2017-02-26 [SC] [revoked: 2017-02-26]

      84930FFB79B645F7DEA29AD0AC6DD3FFD1D046BD

uid           [ revoked] Phillip Lord <phillip.lord <at> newcastle.ac.uk>

uid           [ revoked] Phillip Lord <phillip.lord <at> russet.org.uk>



Thank you,

Daniel Kill
YourWishIsMine <at> gmail.com<mailto:YourWishIsMine <at> gmail.com>

[Message part 2 (text/html, inline)]

Message #10 received at 41776 <at> debbugs.gnu.org (full text, mbox):

From: Lars Ingebrigtsen <larsi <at> gnus.org>
To: Daniel Kill <yourwishismine <at> live.com>
Cc: 41776 <at> debbugs.gnu.org
Subject: Re: bug#41776: emacs 26.3 for Windows is signed with a Revoked key
Date: Fri, 22 Jan 2021 21:18:02 +0100

Daniel Kill <yourwishismine <at> live.com> writes:

> https://ftp.gnu.org/gnu/emacs/windows/emacs-26/emacs-26.3-x86_64.zip
>
> and
>
> https://ftp.gnu.org/gnu/emacs/windows/emacs-26/emacs-26.3-
>
> x86_64.zip.sig

I tried this with the emacs-27 packages, and that seems to use a new,
non-revoked key:

larsi <at> xo:~/Downloads$ gpg --verify emacs-27.1-x86_64.zip.sig emacs-27.1-x86_64.zip
gpg: Signature made Tue Aug 25 18:20:23 2020 CEST
gpg:                using RSA key 8E64B119FE4BAC58C767D5ECE095C1A63FB1EAD2
gpg: Good signature from "Phillip Lord <phillip.lord <at> russet.org.uk>" [unknown]
gpg:                 aka "Phillip Lord <phillip.lord <at> newcastle.ac.uk>" [unknown]

So I'm going to go ahead and guess that there's not more to be done
here, and I'm closing this bug report.  If there's more that should be
fixed, please respond to the debbugs address and we'll reopen.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.