Item14264: Installation package is signed with a revoked key
Priority: Normal
Current State: Closed
Released In: n/a
Target Release: n/a
Applies To: Web Site
Component:
Branches:
The installation package
Foswiki-2.1.2.tgz
from
https://foswiki.org/Download/FoswikiRelease02x01x02 is signed with the revoked key 0x2B40DFFFF287C07B (revoked 2016-12-08). It seems the key is superseded by 0x86A2870C25C98409. Can you sign the package with the new key?
--
TomHauler - 10 Jan 2017
I've re-generated and uploaded the signatures on both github and sourceforge. Thanks for pointing out the issues. I'm going to leave the past releases signed with the old key but 2.1.2 and 2.1.3-beta1 should both be fine.
--
GeorgeClark - 11 Jan 2017
Yes, the new signature is working fine. Thanks for the quick response.
--
TomHauler - 11 Jan 2017