https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5924


Justin Mason <[EMAIL PROTECTED]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
   Target Milestone|Undefined                   |3.2.6




--- Comment #2 from Justin Mason <[EMAIL PROTECTED]>  2008-08-07 01:41:48 PST 
---
here's what those keys look like:


: jm 78...; gpg -v rules/sa-update-pubkey.txt
gpg: armor header: Version: GnuPG v1.4.2 (SunOS)
pub  4096R/5244EC45 2005-12-20 updates.spamassassin.org Signing Key
<[EMAIL PROTECTED]>
sig        5244EC45 2005-12-20   [selfsig]
sub  4096R/24F434CE 2005-12-20
sig        5244EC45 2005-12-20   [keybind]
sig        5244EC45 2008-01-10   [keybind]

: jm 79...; wget http://www.apache.org/dist/spamassassin/KEYS
--09:23:57--  http://www.apache.org/dist/spamassassin/KEYS
           => `KEYS'
Resolving www.apache.org... 140.211.11.130
Connecting to www.apache.org|140.211.11.130|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2,269 (2.2K) [text/plain]

100%[===========================================================>] 2,269       
 --.--K/s

09:23:58 (78.24 MB/s) - `KEYS' saved [2269/2269]

: jm 80...; gpg -v KEYS
gpg: armor header: Version: GnuPG v1.2.5 (FreeBSD)
pub  1024D/265FA05B 2003-06-09 SpamAssassin Signing Key
<[EMAIL PROTECTED]>
sig        265FA05B 2003-08-21   [selfsig]
sig        E580B363 2003-08-21   Theo Van Dinter <[EMAIL PROTECTED]>
uid                            SpamAssassin Signing Key
<[EMAIL PROTECTED]>
rev        265FA05B 2004-08-16   [selfsig]
sig        265FA05B 2003-06-09   [selfsig]
sig        E580B363 2003-06-09   Theo Van Dinter <[EMAIL PROTECTED]>
sig        8C80C35F 2003-06-09   Rod Begbie <[EMAIL PROTECTED]>
sig        6E58EF0A 2003-08-21   [User ID not found]


ok, fair point -- those keys don't sign each other.  I've fixed that now with
the following KEYS file (attached), which looks like this:

: jm 94...; gpg -v KEYS
gpg: armor header: Version: GnuPG v1.4.7 (FreeBSD)
pub  1024D/265FA05B 2003-06-09 SpamAssassin Signing Key
<[EMAIL PROTECTED]>
sig        265FA05B 2003-08-21   [selfsig]
sig        E580B363 2003-08-21   Theo Van Dinter <[EMAIL PROTECTED]>
sig        ADD4C933 2004-05-09   [User ID not found]
sig        677BA1EC 2004-09-30   [User ID not found]
sig        E213B692 2004-09-30   [User ID not found]
sig        5DC3F473 2004-09-30   [User ID not found]
sig        298BC7D0 2008-08-07   Justin Mason <[EMAIL PROTECTED]>
uid                            SpamAssassin Signing Key
<[EMAIL PROTECTED]>
rev        265FA05B 2004-08-16   [selfsig]
sig        265FA05B 2003-06-09   [selfsig]
sig        E580B363 2003-06-09   Theo Van Dinter <[EMAIL PROTECTED]>
sig        8C80C35F 2003-06-09   Rod Begbie <[EMAIL PROTECTED]>
sig        6E58EF0A 2003-08-21   [User ID not found]
sub  1024D/FC51569B 2003-08-21
sig        265FA05B 2003-08-21   [keybind]
pub  1024D/E580B363 1997-11-09 Theo Van Dinter <[EMAIL PROTECTED]>
sig        27A914E6 2003-03-17   [User ID not found]
sig        8514CC32 2003-03-17   [User ID not found]
sig        9CFB830A 2002-11-05   [User ID not found]
sig        E580B363 2002-10-09   [selfsig]
sig        E580B363 1997-11-09   [selfsig]
uid                            Theo Van Dinter <[EMAIL PROTECTED]>
sig        8514CC32 2003-03-17   [User ID not found]
sig        9CFB830A 2002-11-05   [User ID not found]
sig        E580B363 2002-10-09   [selfsig]
uid                            Theo Van Dinter <[EMAIL PROTECTED]>
sig        8514CC32 2003-03-17   [User ID not found]
sig        9CFB830A 2002-11-05   [User ID not found]
sig        E580B363 2002-10-09   [selfsig]
uid                            Theo Van Dinter <[EMAIL PROTECTED]>
sig        E580B363 2003-06-17   [selfsig]
sub  3072g/B9B33054 1997-11-09
sig        E580B363 1997-11-09   [keybind]
gpg: NOTE: signature key 6E58EF0A expired Sun Oct 10 14:08:04 2004 IST
pub  1024D/6E58EF0A 1999-10-12 Justin Mason <[EMAIL PROTECTED]>
sig        6E58EF0A 1999-10-12   [selfsig]
sub  1024g/98472126 1999-10-12 [expires: 2004-10-10]
sig        6E58EF0A 1999-10-12   [keybind]
pub  1024D/8C80C35F 1997-08-15 rOD Begbie <[EMAIL PROTECTED]>
sig        4C96375D 2001-03-26   [User ID not found]
sig        6AA10B91 2001-03-26   [User ID not found]
sig        8C80C35F 2001-03-26   [selfsig]
sig        6614AC87 2003-06-03   [User ID not found]
uid                            Rod Begbie <[EMAIL PROTECTED]>
sig        4C96375D 1997-08-15   [User ID not found]
sig        8C80C35F 1997-08-15   [selfsig]
uid                            Rod Begbie <[EMAIL PROTECTED]>
sig        8C80C35F 1999-04-26   [selfsig]
uid                            rOD Begbie <[EMAIL PROTECTED]>
sig        8C80C35F 2001-05-16   [selfsig]
sig        6614AC87 2003-06-03   [User ID not found]
uid                            rOD Begbie <[EMAIL PROTECTED]>
sig        4C96375D 2001-03-26   [User ID not found]
sig        8C80C35F 2001-03-26   [selfsig]
sig        6AA10B91 2001-03-26   [User ID not found]
sig        6614AC87 2003-06-03   [User ID not found]
uid                            rOD Begbie <[EMAIL PROTECTED]>
sig        8C80C35F 2003-08-05   [selfsig]
sub  2048g/57E8C6A1 1997-08-15
sig        8C80C35F 1997-08-15   [keybind]
pub  4096R/5244EC45 2005-12-20 updates.spamassassin.org Signing Key
<[EMAIL PROTECTED]>
sig        5244EC45 2005-12-20   [selfsig]
sig        298BC7D0 2008-08-07   Justin Mason <[EMAIL PROTECTED]>
sig        265FA05B 2008-08-07   SpamAssassin Signing Key
<[EMAIL PROTECTED]>
sub  4096R/24F434CE 2005-12-20
sig        5244EC45 2008-01-10   [keybind]

comments?  committers, votes please, and I'll copy it to
http://www.apache.org/dist/spamassassin/KEYS , and update links to point to
that "official" keyring file.


-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to