Exim 4.99.2 signatures

Nigel Kukard via Exim-dev <[email protected]> Thu, 30 Apr 2026 05:07:49 +0000

Newsgroups	gmane.mail.exim.devel
Message-ID	<[email protected]>

Hi there Exim Team,

At the bottom of the release notes it notes that they key id used to 
sign the latest release 4.99.2 is BCE58C8CE41F32DF.

But pulling the binaries from:
https://downloads.exim.org/exim4/exim-4.99.2.tar.xz
https://downloads.exim.org/exim4/exim-4.99.2.tar.xz.asc
https://downloads.exim.org/Exim-Maintainers-Keyring.asc

Fails validation with...

gpg --import Exim-Maintainers-Keyring.asc
gpg --verify exim-4.99.2.tar.xz.asc
gpg: assuming signed data in 'exim-4.99.2.tar.xz'
gpg: Signature made Sat Apr 25 11:49:19 2026 UTC
gpg:                using EDDSA key 745A3503EC71104253C5D4490F04D14A28EAFA16
gpg:                issuer "[email protected]"
gpg: Can't check signature: No public key

I just want to check if this is indeed the correct key and where to 
acquire it.

---

The signatures on the release tarballs should be

    *  key ID 0xBCE58C8CE41F32DF
       Email: jgh@???
---


-N

OpenPGP_signature.asc (application/pgp-signature, 236 B)