HyperForum — Distro signing key expired warning during authenticity check

Re: Distro signing key expired warning during authenticity check

2023-04-04T07:56:41Z

Hyperbola has for package-signing only own ones, but for file-signing there are nevertheless keys from developers used and sure those can and will expire.

Re: Distro signing key expired warning during authenticity check

2023-04-04T03:28:46Z

throgh wrote:

Should be resolved.

I thought that we were supposed to disable key signing due to archlinux keyring issues...

Re: Distro signing key expired warning during authenticity check

2023-04-01T11:17:18Z

Should be resolved.

Re: Distro signing key expired warning during authenticity check

2023-03-24T21:48:01Z

Thanks for noting. Will be worked on.

Distro signing key expired warning during authenticity check

2023-03-24T19:01:33Z

$ gpg --keyserver pgp.mit.edu --recv-key "C92B AA71 3B8D 53D3 CAE6 3FC9 E697 4752 F970 4456"
gpg: directory '/home/user/.gnupg' created
gpg: keybox '/home/user/.gnupg/pubring.kbx' created
gpg: /home/user/.gnupg/trustdb.gpg: trustdb created
gpg: key E6974752F9704456: public key "André Silva " imported
gpg: Total number processed: 1
gpg:               imported: 1

$ gpg --verify hyperbola-milky-way-v0.4.2-dual.iso.sha512.sig
gpg: assuming signed data in 'hyperbola-milky-way-v0.4.2-dual.iso.sha512'
gpg: Signature made Wed Dec 21 14:48:22 2022 PST
gpg:                using RSA key C92BAA713B8D53D3CAE63FC9E6974752F9704456
gpg: Good signature from "André Silva " [expired]
gpg:                 aka "André Silva " [expired]
gpg:                 aka "[jpeg image of size 16875]" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: C92B AA71 3B8D 53D3 CAE6  3FC9 E697 4752 F970 4456