GNU bug report logs - #20298
Missing public key for 24.5

Previous Next

Full log

View this message in rfc822 format

From: Mehmet Atif Ergun <mehmetaergun <at> gmail.com>
To: Glenn Morris <rgm <at> gnu.org>
Cc: 20298 <at> debbugs.gnu.org
Subject: bug#20298: Missing public key for 24.5
Date: Fri, 24 Apr 2015 17:32:13 -0400

On Fri, Apr 24, 2015 at 3:14 PM, Glenn Morris <rgm <at> gnu.org> wrote:
>> I tried to verify the new (emacs-24.5) release but the public key that
>> signed the file is missing in the gnu keyring. The 24.4 had the same
>> problem (the signature for 24.4 belonged to a @gnu.org address.
>
> Nobody here can do anything about that, it's a GNU sysadmin issue.
>
> If you want to verify the signatures, both keys are available from
> standard keyservers, eg pgp.mit.edu. Though since you have never met
> either of us, you have no idea how trustworthy we are. :)
>
> (I don't see what the value of a keyring that is stored on the same ftp
> server as the file you want to download is. Especially since the process
> for updating it, which should be automatic, seems to break a lot.)


In that case, please remove the .sig files and the keyring file from
the server, along with the instructions on how to check the integrity
of the source code from the README file. :)

On a serious note, though, could you please forward the bug report to GNU
sysadmins so that this can be resolved? I do not know whom that would
be.

Thank you,
Mehmet.
https://debbugs.gnu.org/cgi/bugreport.cgi?bug=20298

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.