Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 550472

Summary: admincd-amd64-20150514.iso.DIGESTS signed with expired key
Product: Gentoo Release Media Reporter: Aaron D Borden <adborden>
Component: InstallCDAssignee: Gentoo Release Team <releng>
Status: RESOLVED DUPLICATE    
Severity: normal    
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Aaron D Borden 2015-05-26 15:18:10 UTC 
admincd-amd64-20150514.iso.DIGESTS is signed with an old PGP key which expired in 2013.

  $ gpg --verify admincd-amd64-20150514.iso.DIGESTS.asc
  gpg: Signature made Thu 14 May 2015 06:31:31 PM PDT using RSA key ID 2D182910
  gpg: Good signature from "Gentoo Linux Release Engineering (Automated Weekly Release Key) <releng@gentoo.org>" [expired]
  gpg: Note: This key has expired!
  Primary key fingerprint: 13EB BDBE DE7A 1277 5DFD  B1BA BB57 2E0E 2D18 2910


Key expired in 2013:
> pub  4096R/2D182910  created: 2009-08-25  expired: 2013-08-24  usage: SC
>                      trust: unknown       validity: expired
> [ expired] (1). Gentoo Linux Release Engineering (Automated Weekly Release Key) <releng@gentoo.org>

I haven't checked other ISOs.

Reproducible: Always
Comment 1 Jorge Manuel B. S. Vicetto (RETIRED) Gentoo Infrastructure gentoo-dev 2015-05-26 15:24:02 UTC 

*** This bug has been marked as a duplicate of bug 484946 ***