GNU bug report logs - #41922
Question about signature file of emacs binaries distribution

Previous Next

Package: emacs;

Reported by: Phillip Lord <phillip.lord <at> russet.org.uk>

Date: Wed, 17 Jun 2020 17:12:01 UTC

Severity: normal

Merged with 41776

Done: Lars Ingebrigtsen <larsi <at> gnus.org>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 41922 in the body.
You can then email your comments to 41922 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to bug-gnu-emacs <at> gnu.org:
bug#41922; Package emacs. (Wed, 17 Jun 2020 17:12:02 GMT) Full text and rfc822 format available.
Acknowledgement sent to Phillip Lord <phillip.lord <at> russet.org.uk>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs <at> gnu.org. (Wed, 17 Jun 2020 17:12:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Phillip Lord <phillip.lord <at> russet.org.uk>
To: Dev Prabhu <drp.prabhu <at> gmail.com>
Cc: bug-gnu-emacs <at> gnu.org
Subject: Re: Question about signature file of emacs binaries distribution
Date: Wed, 17 Jun 2020 18:11:30 +0100

Dev Prabhu <drp.prabhu <at> gmail.com> writes:

> Hi,
>
> I downloaded emacs distribution for windows 64-bit binaries
> (emacs-26.3-x86_64.zip) and the associated signature file
> (emacs-26.3-x86_64.zip.sig) from the location
> http://ftp.gnu.org/gnu/emacs/windows/emacs-26/
>
> My attempt to verify the signature says that the signing certificate has
> expired a few months ago.
> Is it still safe to use this download?


Yes. I am considering what to do about the expired key.

Phil
Information forwarded to bug-gnu-emacs <at> gnu.org:
bug#41922; Package emacs. (Thu, 18 Jun 2020 01:44:02 GMT) Full text and rfc822 format available.

Message #8 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Dev Prabhu <drp.prabhu <at> gmail.com>
To: Phillip Lord <phillip.lord <at> russet.org.uk>
Cc: bug-gnu-emacs <at> gnu.org
Subject: Re: Question about signature file of emacs binaries distribution
Date: Wed, 17 Jun 2020 19:56:25 -0500

[Message part 1 (text/plain, inline)]
Thank you.
Dev

On Wed, Jun 17, 2020, 12:11 PM Phillip Lord <phillip.lord <at> russet.org.uk>
wrote:

> Dev Prabhu <drp.prabhu <at> gmail.com> writes:
>
> > Hi,
> >
> > I downloaded emacs distribution for windows 64-bit binaries
> > (emacs-26.3-x86_64.zip) and the associated signature file
> > (emacs-26.3-x86_64.zip.sig) from the location
> > http://ftp.gnu.org/gnu/emacs/windows/emacs-26/
> >
> > My attempt to verify the signature says that the signing certificate has
> > expired a few months ago.
> > Is it still safe to use this download?
>
>
> Yes. I am considering what to do about the expired key.
>
> Phil
>

[Message part 2 (text/html, inline)]
Forcibly Merged 41776 41922. Request was from Stefan Kangas <stefan <at> marxist.se> to control <at> debbugs.gnu.org. (Thu, 13 Aug 2020 00:52:02 GMT) Full text and rfc822 format available.
bug closed, send any further explanations to 41776 <at> debbugs.gnu.org and Daniel Kill <yourwishismine <at> live.com> Request was from Lars Ingebrigtsen <larsi <at> gnus.org> to control <at> debbugs.gnu.org. (Fri, 22 Jan 2021 20:19:02 GMT) Full text and rfc822 format available.
bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Sat, 20 Feb 2021 12:24:05 GMT) Full text and rfc822 format available.
This bug report was last modified 3 years and 59 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.