You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
$ gpg --verify libuv-v1.48.0-dist.tar.gz.sign libuv-v1.48.0-dist.tar.gz
gpg: Signature made Wed 07 Feb 2024 01:20:48 PM MST
gpg: using RSA key 612F0EAD9401622379DF4402F28C3C8DA33C03BE
gpg: Good signature from "Santiago Gimeno (sgimeno) <santiago.gimeno@gmail.com>" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: 612F 0EAD 9401 6223 79DF 4402 F28C 3C8D A33C 03BE
This is the same key fingerprint listed for @santigimeno at https://github.com/libuv/libuv/blob/v1.x/MAINTAINERS.md, and stored in the repo via the pubkey-santigimeno tag.
Both the copy in the git repo, and the one at https://github.com/santigimeno.gpg agree on this expiration.
Presumably the key has been edited and its expiration extended, or new signatures couldn't have been created. But I think the updated public key has never been propagated?
The text was updated successfully, but these errors were encountered:
Aha, yes! Thank you, I can see the updated key on the Ubuntu keyservers. That's not one of the places I tried looking last night. Note that the copy of your key registered with GitHub and the one included in the libuv repo are both still the expired version. See also #4306 which is more of a project-wide issue/question.
The release tarballs at https://dist.libuv.org/dist/v1.48.0/ are signed with an expired key. 1.48.0 was released just yesterday, and yet:
This is the same key fingerprint listed for @santigimeno at
https://github.com/libuv/libuv/blob/v1.x/MAINTAINERS.md
, and stored in the repo via thepubkey-santigimeno
tag.However, it has expired:
Both the copy in the git repo, and the one at
https://github.com/santigimeno.gpg
agree on this expiration.Presumably the key has been edited and its expiration extended, or new signatures couldn't have been created. But I think the updated public key has never been propagated?
The text was updated successfully, but these errors were encountered: