setup 2.902 release candidate - please test
ASSI
Stromeko@nexgo.de
Sat Mar 14 11:48:39 GMT 2020
Jon Turney writes:
>> - Embeds a new Cygwin public key (which nothing is actually signed
>> with yet)
>
> setup.ini is now being signed with both old and new Cygwin keys.
As I have my own mirror script that will then combine any local packages
into one targeted install hierarchy and I _do_ check the signatures
(that has saved me from broken mirrors a few times), I've had to go and
import the new keys, which then gives me:
... mirroring
==> /mnt/mirror/cygwin/x86/setup.xz.sig
==> /mnt/mirror/cygwin/x86/setup.xz
Waiting for 2 transfers to finish 2 1
...all transfers finished!
gpg: Signature made Sa, 14. Mrz 2020 11:53:57 CET
gpg: using DSA key 1169DF9F22734F743AA59232A9A262FF676041BA
gpg: Good signature from "Cygwin <cygwin@cygwin.com>" [unknown]
gpg: Signature made Sa, 14. Mrz 2020 11:53:57 CET
gpg: using RSA key 56405CF6FCC81574682A5D561A698DE9E2E56300
gpg: Good signature from "Cygwin <cygwin@cygwin.com>" [unknown]
So external signature checks actually work exactly as intended, thanks.
Regards,
Achim.
--
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+
Factory and User Sound Singles for Waldorf rackAttack:
http://Synth.Stromeko.net/Downloads.html#WaldorfSounds
More information about the Cygwin-apps
mailing list