http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5775





------- Additional Comments From [EMAIL PROTECTED]  2008-01-29 06:49 -------
it's been reported, btw, that the key being served from pgp.mit.edu is the old
one, not the cross-certified one.  I've sent the key there a few times now, I
don't know if an earlier update just got lost, or if the keyserver doesn't see a
difference from the cross certification.  but if I delete the key locally, then
recv-key, I do in fact get the old one.  so that kind of sucks.


I actually would expect the key to include the subkey signature in "--list-sig"
output, but it doesn't...  The difference is:

pub   4096R/5244EC45 2005-12-20
uid                  updates.spamassassin.org Signing Key <[EMAIL PROTECTED]>
sig 3        5244EC45 2005-12-20  updates.spamassassin.org Signing Key
<[EMAIL PROTECTED]>
sub   4096R/24F434CE 2005-12-20
sig          5244EC45 2005-12-20  updates.spamassassin.org Signing Key
<[EMAIL PROTECTED]>

becomes

pub   4096R/5244EC45 2005-12-20
uid                  updates.spamassassin.org Signing Key <[EMAIL PROTECTED]>
sig 3        5244EC45 2005-12-20  updates.spamassassin.org Signing Key
<[EMAIL PROTECTED]>
sub   4096R/24F434CE 2005-12-20
sig          5244EC45 2005-12-20  updates.spamassassin.org Signing Key
<[EMAIL PROTECTED]>
sig          5244EC45 2008-01-10  updates.spamassassin.org Signing Key
<[EMAIL PROTECTED]>

that's how you can tell which one you have.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to