From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 28950 invoked by alias); 9 Sep 2011 14:44:58 -0000 Received: (qmail 28940 invoked by uid 22791); 9 Sep 2011 14:44:57 -0000 X-SWARE-Spam-Status: No, hits=-2.2 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,T_TO_NO_BRKTS_FREEMAIL X-Spam-Check-By: sourceware.org Received: from mail-wy0-f171.google.com (HELO mail-wy0-f171.google.com) (74.125.82.171) by sourceware.org (qpsmtpd/0.43rc1) with ESMTP; Fri, 09 Sep 2011 14:44:40 +0000 Received: by wyh13 with SMTP id 13so1870749wyh.2 for ; Fri, 09 Sep 2011 07:44:39 -0700 (PDT) Received: by 10.227.19.213 with SMTP id c21mr856410wbb.5.1315579478791; Fri, 09 Sep 2011 07:44:38 -0700 (PDT) Received: from [192.168.2.99] (cpc2-cmbg8-0-0-cust61.5-4.cable.virginmedia.com [82.6.108.62]) by mx.google.com with ESMTPS id ek7sm7737224wbb.14.2011.09.09.07.44.36 (version=SSLv3 cipher=OTHER); Fri, 09 Sep 2011 07:44:36 -0700 (PDT) Message-ID: <4E6A264F.8090302@gmail.com> Date: Fri, 09 Sep 2011 14:44:00 -0000 From: Dave Korn User-Agent: Thunderbird 2.0.0.17 (Windows/20080914) MIME-Version: 1.0 To: cygwin@cygwin.com Subject: Re: Invalid Key: setup.exe authenticity References: <1315201472.11244.140258137376957@webmail.messagingengine.com> In-Reply-To: <1315201472.11244.140258137376957@webmail.messagingengine.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-IsSubscribed: yes Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com X-SW-Source: 2011-09/txt/msg00098.txt.bz2 On 05/09/2011 06:44, carpe_diem wrote: > Upon running the detached signature file through PGP it reports the file > setup.exe was signed on 12/7/2010 with an "Invalid Key". Could you > confirm the origin and safety of setup.exe posted on > http://cygwin.com/install.html ? The file downloaded has the following > MD5: 2ece86924bf59c82b3c1936760ef4631 Verification works for me: > $ gpg --verify setup.exe.sig > gpg: WARNING: using insecure memory! > gpg: please see http://www.gnupg.org/faq.html for more information > gpg: Signature made Tue Dec 7 06:10:02 2010 GMTST using DSA key ID 676041BA > gpg: Good signature from "Cygwin " > > $ md5sum setup.exe > 2ece86924bf59c82b3c1936760ef4631 *setup.exe > > $ I would guess you didn't download and install the public key (http://cygwin.com/key/pubring.asc) into your gpg keyring yet. cheers, DaveK -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple