Esteemed net-snmp coders,

Data
-------
On the net-snmp download page (http://www.net-snmp.org/download.html), the 
download link for the gpg key (http://www.net-snmp.org/net-snmp-admin.asc) 
points to a file containing the older, expired pubkeys:

     PS> gpg --import .\net-snmp-admin.asc
     gpg: key FFEF09D7: public key "Net-SNMP Administrators 
<[email protected]>" imported
     gpg: key 317F8F64: public key "Net-SNMP Administrators 
<[email protected]>" imported
     gpg: Total number processed: 2
     gpg:               imported: 2
     gpg: no ultimately trusted keys found

But the current version is signed by the current valid key.:

     PS> gpg --verify .\net-snmp-5.6.1.1-1.x86.exe.asc
     gpg: Signature made 08/09/11 11:42:20 Eastern Daylight Time using RSA key 
ID A77C5329
     gpg: Can't check signature: No public key

And while keyservers have the new pubkey, it is signed only by itself.

Request
------------
Kindly consider:
1. Providing an updated pubkey on the download page
2. Providing some web-of-trust toehold on the new keys by having some other 
keys sign it-or at least by signing each new key with the previous key before 
it expires.

Thanks for your work to provide an unsurpassed SNMP implementation. It has made 
my life better.


Michael

[email protected] 
   

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Reply via email to