setup-x86_64.exe gpg signing key expired?

Jon Turney jon.turney@dronecode.org.uk
Fri Sep 2 22:25:35 GMT 2022


On 02/09/2022 22:47, Jim Garrison via Cygwin wrote:
> It appears the key expired 2022-02-26, so I presume this is known. I
> bring it up on the slim chance it hasn't been noticed or reported yet.

Refetch the key from https://cygwin.com/key/pubring.asc or a keysever.

We periodically extend the expiration date and re-issue the key.

This avoids using a key without an expiration date, whilst also avoiding 
unnecessary key rotations when the initial expiration date is reached.

> $ gpg -k 56405CF6FCC81574682A5D561A698DE9E2E56300
> pub   rsa4096 2020-02-27 [SC] [expires: 2024-03-02]
>       56405CF6FCC81574682A5D561A698DE9E2E56300
> uid           [ultimate] Cygwin <cygwin@cygwin.com>
> 


More information about the Cygwin mailing list