Re: gpg4win expired code signing cert; please renew.
Werner Koch via Gnupg-users <[email protected]>
| Newsgroups | gmane.comp.encryption.gpg.user |
|---|---|
| Message-ID | <[email protected]> |
Hi! On Wed, 15 Oct 2025 20:53, have--- said: > The current gpg4win code signing certificate[0] is notAfter: > 2025-07-02 12:12:13. I wish to alert the gpg4win developers so they > can renew it, and release gpg4win 5 (and other) packages signed with Of course we are using a new Authenoitcode Cert. But we can't simply resign old releases becuase this would require to entirely unpack everything, resign the binaries, create a new installer and sign that new installer. That is a different software then and requires a new version. Further: Authenticode signatures have a timestamp and thus you have assurance when they were issued. Gpg4win 5.0 is not too far away. Salam-Shalom, Werner -- The pioneers of a warless world are the youth that refuse military service. - A. Einstein _______________________________________________ Gnupg-users mailing list [email protected] https://lists.gnupg.org/mailman/listinfo/gnupg-users
openpgp-digital-signature.asc
(application/pgp-signature, 284 B)
-----BEGIN PGP SIGNATURE----- iJ8EARYKAEcWIQSHd0YfKgdOvEgNNZQZzByeCFsQegUCaPHxUhsUgAAAAAAEAA5t YW51MiwyLjUrMS4xMSwyLDINHHdrQGdudXBnLm9yZwAKCRAZzByeCFsQeq4FAP9J 0qJaN4kfrDdS3e+PXu4Tsaa1bpesFba4z0xHc391+gEAnrEyojyuP6neUvcK6p6S n4TZ8IBJFxWwdLwaLhLmWwo= =chLB -----END PGP SIGNATURE-----