[squid-users] Squid 4.0.16 still signed by old key

Garri Djavadyan garryd at comnet.uz
Sat Nov 5 16:20:35 UTC 2016


On 2016-11-02 06:43, Amos Jeffries wrote:
> On 2/11/2016 8:31 a.m., Garri Djavadyan wrote:
>> According to the announce [1], Squid 4.0.16 and later should be signed
>> by the new key B06884EDB779C89B044E64E3CD6DBF8EF3B17D3E, but it is 
>> still
>> signed by the old Squid 3 key 
>> EA31CC5E9488E5168D2DCC5EB268E706FF5CF463:
>> 
>> $ gpg2 --verify squid-4.0.16.tar.xz.asc squid-4.0.16.tar.xz
>> gpg: Signature made Sun 30 Oct 2016 07:45:12 PM UZT
>> gpg:                using RSA key B268E706FF5CF463
>> gpg: Good signature from "Amos Jeffries <amos at treenet.co.nz>" 
>> [ultimate]
>> gpg:                 aka "Amos Jeffries (Squid 3.0 Release Key)
>> <squid3 at treenet.co.nz>" [ultimate]
>> gpg:                 aka "Amos Jeffries (Squid 3.1 Release Key)
>> <squid3 at treenet.co.nz>" [ultimate]
>> gpg:                 aka "Amos Jeffries <squid3 at treenet.co.nz>" 
>> [ultimate]
>> 
>> 
>> [1]
>> http://lists.squid-cache.org/pipermail/squid-users/2016-October/013299.html
> 
> Darn. I missed one parameter in the script. Sorry.
> 
> New .asc files are now uploaded with the correct signatures. They 
> should
> be visible in the next few hours.
> 
> Amos

Thank you, it is OK now!

Garri


More information about the squid-users mailing list