From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp.jhmg.net (smtp.jhmg.net [147.182.185.113]) by sourceware.org (Postfix) with ESMTPS id A32523858D39 for ; Fri, 2 Sep 2022 22:45:19 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org A32523858D39 Authentication-Results: sourceware.org; dmarc=pass (p=reject dis=none) header.from=jhmg.net Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=jhmg.net Received: from [192.168.10.7] (c-98-232-160-103.hsd1.or.comcast.net [98.232.160.103]) (Authenticated sender: jhg) by smtp.jhmg.net (Postfix) with ESMTPSA id 13AD560849 for ; Fri, 2 Sep 2022 22:45:18 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=jhmg.net; s=smtp; t=1662158719; bh=5N0fV1W5f2JYcd5tdAAZsgj8PZguiKmOgS2igAxabCM=; h=Date:Reply-To:Subject:To:References:From:In-Reply-To:From; b=EdJB6CNLb3IgJhWeGRCBAunAmsbrdbgUBRGW6emcc834hOThHXiKSUVdkBFrQbfEE g6FYuQxHc6tIXamtzYTe4OJxMFrIaiQnPReElPSDwzw5BG12TftjWLNatnDTfsSQoY FsYEtzDS5gQMfq7E4qaEwF46uW7bbB19TkFgOlvI= Message-ID: Date: Fri, 2 Sep 2022 15:45:18 -0700 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0 Thunderbird/91.13.0 Reply-To: jhg@acm.org Subject: Re: setup-x86_64.exe gpg signing key expired? Content-Language: en-US To: cygwin@cygwin.com References: <4fc205ea-6501-c983-297b-97610d39e9c7@jhmg.net> <92b81fdf-d6ed-f790-9b38-56d7bfd3387e@dronecode.org.uk> From: Jim Garrison In-Reply-To: <92b81fdf-d6ed-f790-9b38-56d7bfd3387e@dronecode.org.uk> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Spam-Status: No, score=-0.8 required=5.0 tests=BAYES_00,BODY_8BITS,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,NICE_REPLY_A,SPF_HELO_PASS,SPF_PASS,TXREP,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On 09/02/22 15:25, Jon Turney wrote: > On 02/09/2022 22:47, Jim Garrison via Cygwin wrote: >> It appears the key expired 2022-02-26, so I presume this is known. I >> bring it up on the slim chance it hasn't been noticed or reported yet. > > Refetch the key from https://cygwin.com/key/pubring.asc or a keysever. > > We periodically extend the expiration date and re-issue the key. > > This avoids using a key without an expiration date, whilst also avoiding > unnecessary key rotations when the initial expiration date is reached. > >> $ gpg -k 56405CF6FCC81574682A5D561A698DE9E2E56300 >> pub   rsa4096 2020-02-27 [SC] [expires: 2024-03-02] >>       56405CF6FCC81574682A5D561A698DE9E2E56300 >> uid           [ultimate] Cygwin >> > Got it, thanks. -- Jim Garrison jhg@acm.org