Hi Craig,

Thanks for the reply. Any update on your search for the GPG signing key?

I know that this is a minor problem, but we try to keep the code
signature validation in place as good as we can.


Thanks,
Alex~

On Wed, Jul 12, 2023 at 07:20:56PM +1000, Craig Small wrote:
> I asked the same thing a few weeks ago. Wes said he put the key on the mit
> servers. I haven't checked that (or rc1 either).
> 
> Both are on my to-do list.
> 
>  - Craig
> 
> 
> On Wed, 12 July 2023, 19:12 Alexander Bergmann via Net-snmp-coders, <
> net-snmp-coders@lists.sourceforge.net> wrote:
> 
> > Hi Wes / everyone,
> >
> > Where can I find the current GPG signing key that was used to sign the
> > latest updates?
> >
> > gpg: assuming signed data in 'net-snmp-5.9.4.rc1.tar.gz'
> > gpg: Signature made Thu 22 Jun 2023 05:15:02 PM CEST
> > gpg:                using EDDSA key
> > 6E6718AEF1EB5C65C32D1B2A356BC0B552D53CAB
> > gpg: Can't check signature: No public key
> >
> > I was only able to locate some old keys on SourceForge:
> >
> > files/net-snmp-admin PGP key/current-key/
> >
> >  net-snmp-admins-2014.asc       2011-06-03
> >  net-snmp-admin-keys.asc        2006-01-18
> >
> > I've also opened an issue on github.com:
> >
> > https://github.com/net-snmp/net-snmp/issues/595
> >
> >
> > Thanks in advance,
> > Alex~
> >
> > On Thu, Jun 22, 2023 at 08:31:02AM -0700, Wes Hardaker via Net-snmp-coders
> > wrote:
> > >
> > > It seems like the V5-9-4 branch has finally quieted down a bit.  Thank
> > > you to all the people that have submitted patches, fixes, bug reports,
> > > etc in the last month.  It's time, however, to really get this out the
> > > door.  As such, I've published 5.9.4.rc1 and is available for testing:
> > >
> > >
> > https://sourceforge.net/projects/net-snmp/files/net-snmp/5.9.4-pre-releases/
> > >
> > > As a reminder, all patches from here out to the V5-9 branch must have
> > > discussion on -coders first, with at least 3 people in favor of applying
> > > them.  Additionally, any code changes will likely cause another rc
> > > candidate to appear instead of the real release as well.  So make them
> > > count :-)
> > >
> > > The one exception to this: I'd love some help adding to the NEWS file.
> > > It's rather bland at the moment and doesn't reflect the hard work that
> > > has gone into this release by everyone.  Feel free to add NEWS blips
> > > without multi-person reviews.
> > >
> > > --
> > > Wes Hardaker
> > > Please mail all replies to net-snmp-coders@lists.sourceforge.net
> > >
> > >
> > > _______________________________________________
> > > Net-snmp-coders mailing list
> > > Net-snmp-coders@lists.sourceforge.net
> > > https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
> >
> > --
> > Alexander Bergmann <abergm...@suse.com>
> > Security Engineer, GPG: E30A 65A4 0F50 0066 B2B5  F614 DE54 E875 9FFA 4886
> > SUSE Software Solutions Germany GmbH
> > Maxfeldstr. 5, 90409 Nuremberg, Germany
> > (HRB 36809, AG Nürnberg)
> > Managing Director/Geschäftsführer: Ivo Totev, Andrew Myers, Andrew
> > McDonald, Boudien Moerman
> > _______________________________________________
> > Net-snmp-coders mailing list
> > Net-snmp-coders@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
> >

-- 
Alexander Bergmann <abergm...@suse.com>
Security Engineer, GPG: E30A 65A4 0F50 0066 B2B5  F614 DE54 E875 9FFA 4886
SUSE Software Solutions Germany GmbH
Frankenstr. 146, 90461 Nuernberg, Germany
Managing Director/Geschäftsführer: Ivo Totev, Andrew McDonald, Werner Knoblich
(HRB 36809, AG Nürnberg)

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Net-snmp-coders mailing list
Net-snmp-coders@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Reply via email to