Re: gpg4win expired code signing cert; please renew.
Werner Koch via Gnupg-users <[email protected]>
| Newsgroups | gmane.comp.encryption.gpg.user |
|---|---|
| Message-ID | <[email protected]> |
On Fri, 17 Oct 2025 09:19, have--- said:
> I reported a real-world cert validation error on a Microsoft platform,
> of Gpg4win 5 beta. The latest gpg4win-beta package (369) was
> published 2025-09-05, two months after cert expiry — thus, **the
Nope. Your system is not up to date or something else is wrong at your
site. Here is the result on a freshly installed Windows 11 box:
Sigcheck v2.80 - File version and signature viewer
Copyright (C) 2004-2020 Mark Russinovich
Sysinternals - www.sysinternals.com
H:\gpg4win-5.0.0-beta369.exe:
Verified: Signed
Signing date: 14:07 05/09/2025
Publisher: g10 Code GmbH
Company: g10 Code GmbH
Description: Gpg4win: The GNU Privacy Guard and Tools for Windows
Product: Gpg4win (5.0.0-beta369)
Prod version: n/a
File version: 5.0.0.31191
MachineType: 32-bit
Binary Version: 5.0.0.31191
Original Name: n/a
Internal Name: n/a
Copyright: Copyright (C) 2024 g10 Code GmbH
Comments: Gpg4win is Free Software; you can redistribute it and/or modify it under the terms of the GNU General Public License. You should have received a copy of the GNU General Public License along with this software; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
Entropy: 7.999
And if you use the GUI you can clearly see that a new certificate is
used [1].
Salam-Shalom,
Werner
--
The pioneers of a warless world are the youth that
refuse military service. - A. Einstein
_______________________________________________
Gnupg-users mailing list
[email protected]
https://lists.gnupg.org/mailman/listinfo/gnupg-users
2025-10-17-sc.png
(image/png, 45.6 KB) - not displayed
openpgp-digital-signature.asc
(application/pgp-signature, 284 B)
-----BEGIN PGP SIGNATURE----- iJ8EARYKAEcWIQSHd0YfKgdOvEgNNZQZzByeCFsQegUCaPIbUxsUgAAAAAAEAA5t YW51MiwyLjUrMS4xMSwyLDINHHdrQGdudXBnLm9yZwAKCRAZzByeCFsQetAAAQCA LuIeiXgsGPDf8k1N4vnrhy094x+y0+CCHre1i6HBRAEA/7j2q8auONWJEsnIadby IPPsiw/dN/yNWkK3PsrrhA8= =wdOU -----END PGP SIGNATURE-----