[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (Guile-SDL) release signing key
From: |
Thien-Thi Nguyen |
Subject: |
Re: (Guile-SDL) release signing key |
Date: |
Mon, 20 Jun 2022 07:56:40 -0400 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux) |
() Thiago Jung Bauermann via bug-guile-sdl <bug-guile-sdl@gnu.org>
() Sun, 19 Jun 2022 20:54:59 -0300
I'd just like to report an issue I had when trying to verify
the signature for version 0.6.1's release: I downloaded the
key from Thien-Thi Nguyen's Savannah user page¹ and while it
worked, GnuPG warned me that the key is expired: [...]
Thanks for checking.
So I have a few suggestions:
1. Take the opportunity to move to a current algorithm and
key length. AFAIK 1024-bit DSA is considered weak
nowadays. Or if this is undesired, update the key with a
new expiry date.
I'll look into this at some point (but not now). What (better)
algorithm and key length do you suggest?
2. Update the key on the Savannah user page.
I've done this. Please try the latest and see if it behaves as
expected.
3. Mention on Guile-SDL website which public key is used to
sign releases, and how to obtain and verify it.
Good idea. I'll do that shortly.
Thank you for providing this new release! It fixed a
long-standing bug reported on GNU Guix: “guile-sdl-0.5.2
fails to install on i686”².
Glad to hear that! Please see also Guile-SDL Demos for examples
of how to use Guile-SDL:
- https://www.gnuvola.org/software/guile-sdl-demos/
(You can report problems there to this mailing list, as well.)
--
Thien-Thi Nguyen -----------------------------------------------
(defun responsep (query) ; (2022) Software Libero
(pcase (context query) ; = Dissenso Etico
(`(technical ,ml) (correctp ml))
...)) 748E A0E8 1CB8 A748 9BFA
--------------------------------------- 6CE4 6703 2224 4C80 7502