https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6288
Summary: remove 265FA05B from the list of trusted-by-default
sa-update keys
Product: Spamassassin
Version: 3.3.0
Platform: Other
OS/Version: All
Status: NEW
Severity: enhancement
Priority: P5
Component: sa-update
AssignedTo: [email protected]
ReportedBy: [email protected]
# Default list of GPG keys allowed to sign update releases
#
# pub 1024D/265FA05B 2003-06-09
# Key fingerprint = 26C9 00A4 6DD4 0CD5 AD24 F6D7 DEE0 1987 265F A05B
# uid SpamAssassin Signing Key <[email protected]>
# sub 1024D/FC51569B 2003-08-21
#
# pub 4096R/5244EC45 2005-12-20
# Key fingerprint = 5E54 1DC9 59CB 8BAC 7C78 DFDC 4056 A61A 5244 EC45
# uid updates.spamassassin.org Signing Key
<[email protected]>
# sub 4096R/24F434CE 2005-12-20
#
# note for gpg newbs: these are "long" gpg keyids. It's common to also
# use the last 8 hex digits as a shorter keyid string.
#
my %valid_GPG = (
'26C900A46DD40CD5AD24F6D7DEE01987265FA05B' => 1,
'0C2B1D7175B852C64B3CDC716C55397824F434CE' => 1,
'5E541DC959CB8BAC7C78DFDC4056A61A5244EC45' => 1,
);
265fa05b is now deprecated due to its use of a 1024-bit key. We should remove
it from the list of trusted-by-default sa-update keys.
--
Configure bugmail:
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
