Subject: bug#11247: closed (Fwd: [gnu.org #745158] Missing public key)

From: [email-masked] (GNU bug Tracking System)
Date: Sat, 21 Apr 2012 01:52:01 +0000

Your bug report

#11247: A missing public key.

which was filed against the emacs package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to [email-masked].

-- 
11247: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=11247
GNU Bug Tracking System
Contact [email-masked] with problems

Subject: Fwd: [gnu.org #745158] Missing public key
From: Christoph Scholtes <[email-masked]>
To: [email-masked]
Cc: Glenn Morris <[email-masked]>, Chong Yidong <[email-masked]>, [email-masked], [email-masked], Stefan Monnier <[email-masked]>
Date: Fri, 20 Apr 2012 19:51:11 -0600
List-Id: <debbugs-submit.debbugs.gnu.org>

The issue with the missing public key in the keyring has apparently been 
resolved, see below.

Christoph

-------- Original Message --------
Subject: [gnu.org #745158] Missing public key
Date: Fri, 20 Apr 2012 13:57:27 -0400
From: Ward Vandewege via RT <[email-masked]>
Reply-To: [email-masked]

Hi Mike,

> Subject: Public key needed to verify precompiled distribution of Emacs
>    for Windows emacs-23.4-bin-i386.zip missing from gnu-keyring.gpg.
>
> Apologies if this is not the correct email address for this issue to
>    answer this.
>
> After downloading emacs-23.4-bin-i386.zip and emacs-23.4-bin-
>    i386.zip.sig from http://ftp.gnu.org/gnu/emacs/windows and loading
>    the latest gnu-keyring.gpg from http://ftp.gnu.org/gnu/ with "gpg
>    -import", key 597F9E69 doesn't appear to be available even though
>    my keyring appears to be up-to-date:
>
> > gpg --verify emacs-23.4-bin-i386.zip.sig emacs-23.4-bin-i386.zip
> gpg: Signature made Sun Feb  5 17:56:50 2012 EST using RSA key ID
>    597F9E69
> gpg: Can't check signature: public key not found
> > gpg --import gnu-keyring.gpg | & egrep
>    'processed|unchanged|597F9E69'
> gpg: 100 keys processed so far
> gpg: 200 keys processed so far
> gpg: 300 keys processed so far
> gpg: Total number processed: 359
> gpg:              unchanged: 359
>
> I have successfully checked the signature on the 23.3 version with
>    that same gnu-keyring.gpg:
>
> > gpg --verify emacs-23.3-bin-i386.zip.sig emacs-23.3-bin-i386.zip
> gpg: Signature made Thu Mar 10 06:32:55 2011 EST using DSA key ID
>    FBD57530
> gpg: Good signature from "Sean Sieger
>    <[email-masked]<mailto:[email-masked]>>"
> gpg: WARNING: This key is not certified with a trusted signature!
> gpg:          There is no indication that the signature belongs to the
>    owner.
> Primary key fingerprint: 5E02 0890 E767 ABFA 369E  F830 159D 9343 FBD5
>    7530
>
> Thanks for any help you can provide,

Thanks for letting us know. The cron job that updates the gnu-keyring
file was not running due to a configuration error. That has now been
resolved, so you should be able to verify the release at this time.

Thanks,
Ward.

-- 
Ward Vandewege | CTO, Free Software Foundation
GPG Key: 25F774AB | http://identi.ca/cure | http://fsf.org/blogs/RSS

Subject: A missing public key.
From: Chen Xiaodong <[email-masked]>
To: [email-masked]
Date: Sun, 15 Apr 2012 22:01:56 +0800
List-Id: <debbugs-submit.debbugs.gnu.org>

I find that the public key(ID: 597F9E69) is not included in 
"http://ftp.gnu.org/pub/gnu/gnu-keyring.gpg", which is required to verify the 
signature of 
"http://ftp.gnu.org/pub/gnu/emacs/windows/emacs-23.3-bin-i386.zip.sig".

Please solve this bug.