Hi!

On Wed, 15 Oct 2025 20:53, have--- said:
> The current gpg4win code signing certificate[0] is notAfter:
> 2025-07-02 12:12:13.  I wish to alert the gpg4win developers so they
> can renew it, and release gpg4win 5 (and other) packages signed with

Of course we are using a new Authenoitcode Cert.  But we can't simply
resign old releases becuase this would require to entirely unpack
everything, resign the binaries, create a new installer and sign that
new installer.  That is a different software then and requires a new
version.

Further: Authenticode signatures have a timestamp and thus you have
assurance when they were issued.

Gpg4win 5.0 is not too far away.


Salam-Shalom,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein

Attachment: openpgp-digital-signature.asc
Description: PGP signature

_______________________________________________
Gnupg-users mailing list
[email protected]
https://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to