[SPAM?] Re: [SPAM?] Re: OT: Miro's PGP signature [Was: urlv…

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Author: Will Yardley
Date:  
To: mutt-users
CC: Ben McGinnes
New-Topics: Re: PGP sigs fail verification
Subject: [SPAM?] Re: [SPAM?] Re: OT: Miro's PGP signature [Was: urlview not listing the links right]
On Wed, Sep 21, 2016 at 04:32:36PM -0500, Derek Martin wrote:
> On Wed, Sep 21, 2016 at 08:40:46PM +1000, Ben McGinnes wrote:
> > All four of Miro's sigs were fine for me. Yours, however, wasn't.
>
> FWIW, for me, every message in this thread that carried a signature
> verified correctly. I'm currently running mutt-1.5.21 with gpg-1.4.5.
> I should really update those... =8^)


Maybe unrelated, but, I've been getting the following error (using
gpgme), *when* I already have a signature from someone whose key has
expired (i.e., gpg will seek out a key from the keyserver for a user
whose key I don't have, but not in the case where I have the key
matching the key-id present, but an old version of it). For example,
with this message:

Problem signature from: Derek D. Martin <ddm@???>
               created: Wed Sep 21 14:32:35 2016
Warning: The key used to create the signature expired at: Sat Oct 11 13:15:40 2003 


But then after:
aura% gpg -kv ddm@???
gpg: using PGP trust model
gpg: Note: signature key DFBEAD02 expired Sat Oct 11 13:15:40 2003 PDT
pub   dsa1024/DFBEAD02 2002-10-11 [SCA] [expired: 2003-10-11]
uid         [ expired] Derek D. Martin <ddm@???>
sub   elg4096/93A42B14 2002-10-11 [E] [expired: 2003-10-11]


aura% gpg --recv-keys DFBEAD02
gpg: key DFBEAD02: "Derek D. Martin <ddm@???>" 1 new user ID
gpg: key DFBEAD02: "Derek D. Martin <ddm@???>" 35 new signatures
gpg: key DFBEAD02: public key "Derek D. Martin <ddm@???>" imported
gpg: marginals needed: 3  completes needed: 1  trust model: PGP
gpg: depth: 0  valid:   1  signed:   4  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:   4  signed:   0  trust: 4-, 0q, 0n, 0m, 0f, 0u
gpg: Total number processed: 2
gpg:               imported: 1
gpg:           new user IDs: 1
gpg:         new signatures: 35


Then I see:
Good signature from: Derek D. Martin <ddm@???>
                aka: Derek D. Martin <ddm@???>
            created: Wed Sep 21 14:32:35 2016



w