X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 5E2133858C55
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1662155339;
	bh=MnpZj/gd+X6l+U32ozYnBcje88yJ8RFeeBjindvCNio=;
	h=Date:To:Subject:List-Id:List-Unsubscribe:List-Archive:List-Post:
	List-Help:List-Subscribe:From:Reply-To:Cc:From;
	b=oR8gdD9oAlf0M5QLptQ1RZHa5yopFXxijonyEgt/REkQXYctC2jM85AJsEpFuX/7O
	fz5Gh5CfJdO1ygVsJGbGRGUsewPU412/KCmdA8/1a7OBLCg3SKWmipFvA6HvctV6q1
	w8u34pDPuzWLmTWHwG3huZO+zGVxJPMZDkWI5dsk=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.1 sourceware.org 0E6B73858D1E
Message-ID:	<4fc205ea-6501-c983-297b-97610d39e9c7@jhmg.net>
Date:	Fri, 2 Sep 2022 14:47:51 -0700
MIME-Version:	1.0
User-Agent:	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101
	Firefox/91.0 Thunderbird/91.13.0
To:	cygwin AT cygwin DOT com
Subject:	setup-x86_64.exe gpg signing key expired?
X-Spam-Status:	No, score=-2.3 required=5.0 tests=BAYES_00, DKIM_SIGNED,
	DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, SPF_HELO_PASS, SPF_PASS, TXREP,
	T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version:	SpamAssassin 3.4.6 (2021-04-09) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	Jim Garrison via Cygwin <cygwin AT cygwin DOT com>
Reply-To:	jhg AT acm DOT org
Cc:	Jim Garrison <jhg AT jhmg DOT net>
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

It appears the key expired 2022-02-26, so I presume this is known. I
bring it up on the slim chance it hasn't been noticed or reported yet.

$ gpg --verify setup-x86_64.exe.sig
gpg: assuming signed data in 'setup-x86_64.exe'
gpg: Signature made Fri, Jun 24, 2022 05:48:55 PDT
gpg:                using DSA key 1169DF9F22734F743AA59232A9A262FF676041BA
gpg: checking the trustdb
gpg: public key CCB2EB46E76CF6D0 is 35475 seconds newer than the signature
gpg: marginals needed: 3  completes needed: 1  trust model: classic
gpg: depth: 0  valid:   3  signed:   3  trust: 0-, 0q, 0n, 0m, 0f, 3u
gpg: depth: 1  valid:   3  signed:   0  trust: 2-, 0q, 0n, 0m, 1f, 0u
gpg: next trustdb check due at 2023-04-30
gpg: Good signature from "Cygwin <cygwin AT cygwin DOT com>" [full]
gpg: Signature made Fri, Jun 24, 2022 05:48:55 PDT
gpg:                using RSA key 56405CF6FCC81574682A5D561A698DE9E2E56300
gpg: Good signature from "Cygwin <cygwin AT cygwin DOT com>" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: 5640 5CF6 FCC8 1574 682A  5D56 1A69 8DE9 E2E5 6300

...and...

$ gpg -k 56405CF6FCC81574682A5D561A698DE9E2E56300
pub   rsa4096 2020-02-27 [SC] [expired: 2022-02-26]
       56405CF6FCC81574682A5D561A698DE9E2E56300
uid           [ expired] Cygwin <cygwin AT cygwin DOT com>

Cheers!

-- 
Jim Garrison
jhg AT acm DOT org

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -