X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.1 sourceware.org 44ACC3858000
Authentication-Results:	sourceware.org;
	dmarc=pass (p=none dis=none) header.from=gmail.com
Authentication-Results:	sourceware.org; spf=pass smtp.mailfrom=gmail.com
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112;
	h=mime-version:from:date:message-id:subject:to;
	bh=Awn254ZUoMQAOnaa24roiverbohB8hNK61KscB8AafI=;
	b=aQvLfKBv1qG+Fgzp/imQoxTBAnyl+eCqphBMwVMTQM0qfr4UYP8a+j9CCFGEnF2rom
	V1YVJaKLBxFPQ7B/+N/2qjU42a/tj0rVnBcwqZiH93oNjo9q+LATNvwMExOO06ktQowz
	UfmwGQgnYjkBHh5jiakzn6lzt8XlRbkBx/wRdJuAoPIYLE9d7OEsSZXEL2jGF2GAClre
	Cs7wrD/mNf7bqGOgj+5BXNUdxhPVSoLx4lYHyMRjJsw+Tl1XVRUDobUQUPgk3GKZv5+k
	ucbXXhkXw3UK9gK/Lv6eTmeeRTY72PileYAgoozFBfHYgTIqDfaZrZxURjrsxhvvDIjZ
	5Sng==
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20210112;
	h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
	bh=Awn254ZUoMQAOnaa24roiverbohB8hNK61KscB8AafI=;
	b=JiTyZI9+si4aD16SWUH3PU6D5hAO16u0GG0kPbff2Mokr4n+G++7psZijUWTZcb/vb
	0zDAbsuvwO7OByTNdzvajgHmUJfPF0kHkGWv3n7uoljyYXhG+ZsnKXXcijuWvmeHxYBK
	xqokDMfczb+sL5zG3JkJ9YEP+u7GNZgTnW10jHgoJwHTj2TESG9xdyzr90GlZUOL6LSo
	PjZ/SfYpw8uBwYSHZV9qlUj3Qr3x6HskpJdexlwqzttuHuKjuPYHJREY5+XuB3cQPNVo
	nC3raWruV7DfzvRdPyYhzqESe2iVOMsmBnZHSdGGZMxGwZpnogilh9s/uSp/qTj9lPPz
	Qt4g==
X-Gm-Message-State:	AOAM532elER6JyGLEaM/R6KA9j9JiNosPtYfX7zQDIsNsY/B25JuetxB
	uxp7pj893x4/zb0LFqGQeiaZfy4V91ZAWbRfPVcrfLKAaS8=
X-Google-Smtp-Source:	ABdhPJzNNFlUMk3Gcuc8ltqwqtCdEjnpV6K+cycXjKBjKEjRPB3e573EUjnWoG9OVzbFPbjs9AC/0SSRoIVtrjemLys=
X-Received:	by 2002:a17:902:d64f:b0:149:4d01:fb42 with SMTP id
	y15-20020a170902d64f00b001494d01fb42mr32755957plh.13.1640899500277; Thu, 30
	Dec 2021 13:25:00 -0800 (PST)
MIME-Version:	1.0
From:	Greg Williamson <greg DOT williamson45 AT gmail DOT com>
Date:	Thu, 30 Dec 2021 14:24:49 -0700
Message-ID:	<CAPwDAhA1mFg9=QkU6OU_1BFC_Sz500yJ2+YpQgzf1p-i2Lyabw@mail.gmail.com>
Subject:	Unable to Verify 64 bit Installer on Windows
To:	cygwin AT cygwin DOT com
X-Spam-Status:	No, score=-0.4 required=5.0 tests=BAYES_00, DKIM_SIGNED,
	DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_ENVFROM_END_DIGIT,
	FREEMAIL_FROM, HTML_MESSAGE, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS,
	TXREP autolearn=ham autolearn_force=no version=3.4.4
X-Spam-Checker-Version:	SpamAssassin 3.4.4 (2020-01-24) on
	server2.sourceware.org
X-Content-Filtered-By:	Mailman/MimeDel 2.1.29
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

Hello,

While attempting to verify the installer found here:
https://cygwin.com/install.html

GPG verification for "setup-x86_64.exe" failed with "BAD signature from
"Cygwin <cygwin AT cygwin DOT com>". I also created a SHA512 hash of the installer
and it did not match the one posted here:
https://cygwin.com/sha512.sum

As a sanity check I attempted to verify the 32bit version "setup-x86.exe".
The SHA512 matched and the GPG signature verification succeeded.

I thought I'd report here in case there was a security issue. Thank you in
advance for your assistance!

~Greg

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -