From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <greg.williamson45@gmail.com>
Received: from mail-pj1-x102b.google.com (mail-pj1-x102b.google.com
 [IPv6:2607:f8b0:4864:20::102b])
 by sourceware.org (Postfix) with ESMTPS id 44ACC3858000
 for <cygwin@cygwin.com>; Thu, 30 Dec 2021 21:25:01 +0000 (GMT)
DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 44ACC3858000
Authentication-Results: sourceware.org;
 dmarc=pass (p=none dis=none) header.from=gmail.com
Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com
Received: by mail-pj1-x102b.google.com with SMTP id iy13so22075626pjb.5
 for <cygwin@cygwin.com>; Thu, 30 Dec 2021 13:25:01 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112;
 h=mime-version:from:date:message-id:subject:to;
 bh=Awn254ZUoMQAOnaa24roiverbohB8hNK61KscB8AafI=;
 b=aQvLfKBv1qG+Fgzp/imQoxTBAnyl+eCqphBMwVMTQM0qfr4UYP8a+j9CCFGEnF2rom
 V1YVJaKLBxFPQ7B/+N/2qjU42a/tj0rVnBcwqZiH93oNjo9q+LATNvwMExOO06ktQowz
 UfmwGQgnYjkBHh5jiakzn6lzt8XlRbkBx/wRdJuAoPIYLE9d7OEsSZXEL2jGF2GAClre
 Cs7wrD/mNf7bqGOgj+5BXNUdxhPVSoLx4lYHyMRjJsw+Tl1XVRUDobUQUPgk3GKZv5+k
 ucbXXhkXw3UK9gK/Lv6eTmeeRTY72PileYAgoozFBfHYgTIqDfaZrZxURjrsxhvvDIjZ
 5Sng==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20210112;
 h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
 bh=Awn254ZUoMQAOnaa24roiverbohB8hNK61KscB8AafI=;
 b=JiTyZI9+si4aD16SWUH3PU6D5hAO16u0GG0kPbff2Mokr4n+G++7psZijUWTZcb/vb
 0zDAbsuvwO7OByTNdzvajgHmUJfPF0kHkGWv3n7uoljyYXhG+ZsnKXXcijuWvmeHxYBK
 xqokDMfczb+sL5zG3JkJ9YEP+u7GNZgTnW10jHgoJwHTj2TESG9xdyzr90GlZUOL6LSo
 PjZ/SfYpw8uBwYSHZV9qlUj3Qr3x6HskpJdexlwqzttuHuKjuPYHJREY5+XuB3cQPNVo
 nC3raWruV7DfzvRdPyYhzqESe2iVOMsmBnZHSdGGZMxGwZpnogilh9s/uSp/qTj9lPPz
 Qt4g==
X-Gm-Message-State: AOAM532elER6JyGLEaM/R6KA9j9JiNosPtYfX7zQDIsNsY/B25JuetxB
 uxp7pj893x4/zb0LFqGQeiaZfy4V91ZAWbRfPVcrfLKAaS8=
X-Google-Smtp-Source: ABdhPJzNNFlUMk3Gcuc8ltqwqtCdEjnpV6K+cycXjKBjKEjRPB3e573EUjnWoG9OVzbFPbjs9AC/0SSRoIVtrjemLys=
X-Received: by 2002:a17:902:d64f:b0:149:4d01:fb42 with SMTP id
 y15-20020a170902d64f00b001494d01fb42mr32755957plh.13.1640899500277; Thu, 30
 Dec 2021 13:25:00 -0800 (PST)
MIME-Version: 1.0
From: Greg Williamson <greg.williamson45@gmail.com>
Date: Thu, 30 Dec 2021 14:24:49 -0700
Message-ID: <CAPwDAhA1mFg9=QkU6OU_1BFC_Sz500yJ2+YpQgzf1p-i2Lyabw@mail.gmail.com>
Subject: Unable to Verify 64 bit Installer on Windows
To: cygwin@cygwin.com
X-Spam-Status: No, score=-0.4 required=5.0 tests=BAYES_00, DKIM_SIGNED,
 DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_ENVFROM_END_DIGIT,
 FREEMAIL_FROM, HTML_MESSAGE, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS,
 TXREP autolearn=ham autolearn_force=no version=3.4.4
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on
 server2.sourceware.org
Content-Type: text/plain; charset="UTF-8"
X-Content-Filtered-By: Mailman/MimeDel 2.1.29
X-BeenThere: cygwin@cygwin.com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request@cygwin.com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-request@cygwin.com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request@cygwin.com?subject=subscribe>
X-List-Received-Date: Thu, 30 Dec 2021 21:25:02 -0000

Hello,

While attempting to verify the installer found here:
https://cygwin.com/install.html

GPG verification for "setup-x86_64.exe" failed with "BAD signature from
"Cygwin <cygwin@cygwin.com>". I also created a SHA512 hash of the installer
and it did not match the one posted here:
https://cygwin.com/sha512.sum

As a sanity check I attempted to verify the 32bit version "setup-x86.exe".
The SHA512 matched and the GPG signature verification succeeded.

I thought I'd report here in case there was a security issue. Thank you in
advance for your assistance!

~Greg