Re: gpg4win expired code signing cert; please renew.

Werner Koch via Gnupg-users <[email protected]>
Newsgroups gmane.comp.encryption.gpg.user
Message-ID <[email protected]>
On Fri, 17 Oct 2025 09:19, have--- said:

> I reported a real-world cert validation error on a Microsoft platform,
> of Gpg4win 5 beta.  The latest gpg4win-beta package (369) was
> published 2025-09-05, two months after cert expiry — thus, **the

Nope.  Your system is not up to date or something else is wrong at your
site.  Here is the result on a freshly installed Windows 11 box:

  Sigcheck v2.80 - File version and signature viewer
  Copyright (C) 2004-2020 Mark Russinovich
  Sysinternals - www.sysinternals.com
  
  H:\gpg4win-5.0.0-beta369.exe:
          Verified:       Signed
          Signing date:   14:07 05/09/2025
          Publisher:      g10 Code GmbH
          Company:        g10 Code GmbH
          Description:    Gpg4win: The GNU Privacy Guard and Tools for Windows
          Product:        Gpg4win (5.0.0-beta369)
          Prod version:   n/a
          File version:   5.0.0.31191
          MachineType:    32-bit
          Binary Version: 5.0.0.31191
          Original Name:  n/a
          Internal Name:  n/a
          Copyright:      Copyright (C) 2024 g10 Code GmbH
          Comments:       Gpg4win is Free Software; you can redistribute it  and/or modify it under the terms of the GNU General Public License.  You should have received a copy of the GNU General Public License  along with this software; if not, write to the Free Software  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,  MA 02110-1301, USA
          Entropy:        7.999

And if you use the GUI you can clearly see that a new certificate is
used [1].


Salam-Shalom,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein

_______________________________________________
Gnupg-users mailing list
[email protected]
https://lists.gnupg.org/mailman/listinfo/gnupg-users
2025-10-17-sc.png (image/png, 45.6 KB) - not displayed
openpgp-digital-signature.asc (application/pgp-signature, 284 B)
-----BEGIN PGP SIGNATURE-----

iJ8EARYKAEcWIQSHd0YfKgdOvEgNNZQZzByeCFsQegUCaPIbUxsUgAAAAAAEAA5t
YW51MiwyLjUrMS4xMSwyLDINHHdrQGdudXBnLm9yZwAKCRAZzByeCFsQetAAAQCA
LuIeiXgsGPDf8k1N4vnrhy094x+y0+CCHre1i6HBRAEA/7j2q8auONWJEsnIadby
IPPsiw/dN/yNWkK3PsrrhA8=
=wdOU
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.