[squid-users] Squid 4.0.16 still signed by old key

Amos Jeffries squid3 at treenet.co.nz
Wed Nov 2 01:43:47 UTC 2016


On 2/11/2016 8:31 a.m., Garri Djavadyan wrote:
> According to the announce [1], Squid 4.0.16 and later should be signed
> by the new key B06884EDB779C89B044E64E3CD6DBF8EF3B17D3E, but it is still
> signed by the old Squid 3 key EA31CC5E9488E5168D2DCC5EB268E706FF5CF463:
> 
> $ gpg2 --verify squid-4.0.16.tar.xz.asc squid-4.0.16.tar.xz
> gpg: Signature made Sun 30 Oct 2016 07:45:12 PM UZT
> gpg:                using RSA key B268E706FF5CF463
> gpg: Good signature from "Amos Jeffries <amos at treenet.co.nz>" [ultimate]
> gpg:                 aka "Amos Jeffries (Squid 3.0 Release Key)
> <squid3 at treenet.co.nz>" [ultimate]
> gpg:                 aka "Amos Jeffries (Squid 3.1 Release Key)
> <squid3 at treenet.co.nz>" [ultimate]
> gpg:                 aka "Amos Jeffries <squid3 at treenet.co.nz>" [ultimate]
> 
> 
> [1]
> http://lists.squid-cache.org/pipermail/squid-users/2016-October/013299.html

Darn. I missed one parameter in the script. Sorry.

New .asc files are now uploaded with the correct signatures. They should
be visible in the next few hours.

Amos



More information about the squid-users mailing list