FS#1506 : Download Authenticity check, key has expired, key ID differs from instructions

Status Closed
Percent Complete
100%
Task Type Bug Report
Category General
Assigned To

Emulatorman
Operating System All
Severity Low
Priority Very Low
Reported Version Milky Way v0.3
Due in Version Starfix
Due Date Undecided
Votes
Private

Attached to Project: Installation
Opened by ithink314 - 07/02/2020
Last edited by Emulatorman - 10/02/2020

FS#1506 - Download Authenticity check, key has expired, key ID differs from instructions

After download of iso, following verify instructions, https://wiki.hyperbola.info/doku.php?id=en:guide:verify_live_images ,

What was done:
$ gpg –keyserver pgp.mit.edu –recv-key “C92B AA71 3B8D 53D3 CAE6 3FC9 E697 4752 F970 4456” $ gpg –verify hyperbola-milky-way-v0.3-dual.iso.sha512.sig

Expected response:
file signature is ‘good’ and that it was signed with the following key: F9704456.

Actual response:
gpg: assuming signed data in ‘hyperbola-milky-way-v0.3-dual.iso.sha512’ gpg: Signature made Mon 23 Sep 2019 12:51:43 PM EDT
gpg: using RSA key C92BAA713B8D53D3CAE63FC9E6974752F9704456
gpg: Good signature from “André Silva emulatorman@hyperbola.info” [expired]
gpg: aka “André Silva emulatorman@riseup.net” [expired]
gpg: aka “[jpeg image of size 24564]” [expired]
gpg: Note: This key has expired!
Primary key fingerprint: C92B AA71 3B8D 53D3 CAE6 3FC9 E697 4752 F970 4456