DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 99D203858D39
Message-ID: <92b81fdf-d6ed-f790-9b38-56d7bfd3387e@dronecode.org.uk>
Date: Fri, 2 Sep 2022 23:25:35 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101
 Thunderbird/91.13.0
Subject: Re: setup-x86_64.exe gpg signing key expired?
Content-Language: en-GB
To: jhg@acm.org, The Cygwin Mailing List <cygwin@cygwin.com>
References: <4fc205ea-6501-c983-297b-97610d39e9c7@jhmg.net>
From: Jon Turney <jon.turney@dronecode.org.uk>
In-Reply-To: <4fc205ea-6501-c983-297b-97610d39e9c7@jhmg.net>
Precedence: list
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: cygwin-bounces+archive-cygwin=delorie.com@cygwin.com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie.com@cygwin.com>

On 02/09/2022 22:47, Jim Garrison via Cygwin wrote:
> It appears the key expired 2022-02-26, so I presume this is known. I
> bring it up on the slim chance it hasn't been noticed or reported yet.

Refetch the key from https://cygwin.com/key/pubring.asc or a keysever.

We periodically extend the expiration date and re-issue the key.

This avoids using a key without an expiration date, whilst also avoiding 
unnecessary key rotations when the initial expiration date is reached.

> $ gpg -k 56405CF6FCC81574682A5D561A698DE9E2E56300
> pub   rsa4096 2020-02-27 [SC] [expires: 2024-03-02]
>       56405CF6FCC81574682A5D561A698DE9E2E56300
> uid           [ultimate] Cygwin <cygwin@cygwin.com>
> 

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple