Latest release signing key is missing a self-signature
Open
Nobody has claimed this yet.
- Dominant language
- Shell
- Stars
- 19
- Forks
- 15
- Avg merge
- 6d 8h
- Merged PRs (30d)
- 2
Description
Hi there,
The latest release signing key provided through this commit is missing a self-signature.
See following command output:
gpg --keyserver hkps://keys.openpgp.org --recv-keys DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7
gpg: requesting key 0DDBF2B7 from hkps server keys.openpgp.org
gpg: key 0DDBF2B7: no valid user IDs
gpg: this may be caused by a missing self-signature
gpg: Total number processed: 1
gpg: w/o user IDs: 1
Can someone work on fixing this issue?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing commit 832b40abe5df5b1a5734d75a9385e6973bceed72 and the release key data it introduced. Reproduce the reported GPG retrieval command, then inspect the key's user IDs and signatures. Done means the published key has a valid self-signature and the command no longer reports a missing user ID.
Written by the indexing model from the issue text.
Assessment
- Domain
- cryptography, release, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100