git/list[1] front-page[2] threads[3] people[4] search[5] about
 

expired key in junio-gpg-pub

From
Jeff King <peff@peff.net>
Date
Sep 7, 2021, 18:12 UTC
Message-ID
<YTerpXCxYx+f+8ws@coredump.intra.peff.net>
It looks like your signing key is expired, and tag verification fails:
  $ mkdir /tmp/foo
  $ export GNUPGHOME=/tmp/foo
  $ git cat-file blob junio-gpg-pub | gpg --import
  gpg: WARNING: unsafe permissions on homedir '/tmp/foo'
  gpg: keybox '/tmp/foo/pubring.kbx' created
  gpg: key 20D04E5A713660A7: 27 signatures not checked due to missing keys
  gpg: /tmp/foo/trustdb.gpg: trustdb created
  gpg: key 20D04E5A713660A7: public key "Junio C Hamano <gitster@pobox.com>" imported
  gpg: Total number processed: 1
  gpg:               imported: 1
  gpg: no ultimately trusted keys found
  $ git tag -v v2.33.0
  object 225bc32a989d7a22fa6addafd4ce7dcd04675dbf
  type commit
  tag v2.33.0
  tagger Junio C Hamano <gitster@pobox.com> 1629141357 -0700
  Git 2.33
  gpg: WARNING: unsafe permissions on homedir '/tmp/foo'
  gpg: Signature made Mon Aug 16 15:15:57 2021 EDT
  gpg:                using RSA key E1F036B1FEE7221FC778ECEFB0B5E88696AFE6CB
  gpg: Good signature from "Junio C Hamano <gitster@pobox.com>" [unknown]
  gpg:                 aka "Junio C Hamano <junio@pobox.com>" [unknown]
  gpg:                 aka "Junio C Hamano <jch@google.com>" [unknown]
  gpg: Note: This key has expired!
  Primary key fingerprint: 96E0 7AF2 5771 9559 80DA  D100 20D0 4E5A 7136 60A7
       Subkey fingerprint: E1F0 36B1 FEE7 221F C778  ECEF B0B5 E886 96AF E6CB
  $ echo $?
  1

Have you extended the expiration on it? I wasn't able to find any updates on the keyservers I checked. But regardless, we should probably ship an updated one via the tag.

-Peff
Next: Konstantin Ryabitsev
Message 1 of 7 in “expired key in junio-gpg-pub”
  1. Jeff KingSep 7, 2021
  2. Konstantin RyabitsevSep 7, 2021
  3. Jeff KingSep 7, 2021
  4. Ævar Arnfjörð BjarmasonSep 7, 2021
  5. Junio C HamanoSep 7, 2021
  6. Jeff KingSep 7, 2021
  7. Konstantin RyabitsevSep 7, 2021

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.