From 1b8f2db3e47d09701d8b45e0694c4b98ad9636ae Mon Sep 17 00:00:00 2001 From: "04448cae@7f89c9ec07b399265c20ea79b979d2afa5f75fa8" <04448cae@web> Date: Sun, 12 Jul 2015 03:23:08 +0000 Subject: Added a comment: GPG Key --- .../comment_1_c216c2d7d42cc578caff815eba85f448._comment | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 doc/install/verifying_downloads/comment_1_c216c2d7d42cc578caff815eba85f448._comment (limited to 'doc/install') diff --git a/doc/install/verifying_downloads/comment_1_c216c2d7d42cc578caff815eba85f448._comment b/doc/install/verifying_downloads/comment_1_c216c2d7d42cc578caff815eba85f448._comment new file mode 100644 index 000000000..c1fbbb05e --- /dev/null +++ b/doc/install/verifying_downloads/comment_1_c216c2d7d42cc578caff815eba85f448._comment @@ -0,0 +1,8 @@ +[[!comment format=mdwn + username="04448cae@7f89c9ec07b399265c20ea79b979d2afa5f75fa8" + nickname="04448cae" + subject="GPG Key" + date="2015-07-12T03:23:07Z" + content=""" +According to https://git-annex.branchable.com/install/verifying_downloads/ we should expect GPG key, C910D9222512E3C7 Joey Hess for this Windows installer file, but git-annex-installer.exe returns \"Signed on 2015-07-10 14:56 by id@joeyh.name (Key ID: 0x89C809CB). The validity of the signature cannot be verified.\" That key is on the keyserver http://pgp.surfnet.nl:11371/pks/lookup?op=vindex&fingerprint=on&search=0x89C809CB but doesn't match the verify page. Is this file legit, or the page in need of update? Thanks! +"""]] -- cgit v1.2.3