[squid-users] Squid 4.0.16 still signed by old key

[Garri Djavadyan]

According to the announce [1], Squid 4.0.16 and later should be signed 
by the new key B06884EDB779C89B044E64E3CD6DBF8EF3B17D3E, but it is still 
signed by the old Squid 3 key EA31CC5E9488E5168D2DCC5EB268E706FF5CF463:

$ gpg2 --verify squid-4.0.16.tar.xz.asc squid-4.0.16.tar.xz
gpg: Signature made Sun 30 Oct 2016 07:45:12 PM UZT
gpg:                using RSA key B268E706FF5CF463
gpg: Good signature from "Amos Jeffries <amos at treenet.co.nz>" [ultimate]
gpg:                 aka "Amos Jeffries (Squid 3.0 Release Key) 
<squid3 at treenet.co.nz>" [ultimate]
gpg:                 aka "Amos Jeffries (Squid 3.1 Release Key) 
<squid3 at treenet.co.nz>" [ultimate]
gpg:                 aka "Amos Jeffries <squid3 at treenet.co.nz>" 
[ultimate]


[1] 
http://lists.squid-cache.org/pipermail/squid-users/2016-October/013299.html