setup-x86_64.exe gpg signing key expired?

Jim Garrison jhg@jhmg.net
Fri Sep 2 22:45:18 GMT 2022


On 09/02/22 15:25, Jon Turney wrote:
> On 02/09/2022 22:47, Jim Garrison via Cygwin wrote:
>> It appears the key expired 2022-02-26, so I presume this is known. I
>> bring it up on the slim chance it hasn't been noticed or reported yet.
> 
> Refetch the key from https://cygwin.com/key/pubring.asc or a keysever.
> 
> We periodically extend the expiration date and re-issue the key.
> 
> This avoids using a key without an expiration date, whilst also avoiding 
> unnecessary key rotations when the initial expiration date is reached.
> 
>> $ gpg -k 56405CF6FCC81574682A5D561A698DE9E2E56300
>> pub   rsa4096 2020-02-27 [SC] [expires: 2024-03-02]
>>       56405CF6FCC81574682A5D561A698DE9E2E56300
>> uid           [ultimate] Cygwin <cygwin@cygwin.com>
>>
> 

Got it, thanks.

-- 
Jim Garrison
jhg@acm.org


More information about the Cygwin mailing list