On 12 Apr 2017, at 22.25, Ralf Zimmermann <r.zimmermann@siegnetz.de> wrote:
Hi,
is there a newer public key available?
root@dc:/usr/local/src# gpg --verify dovecot-2.2.29.1.tar.gz.sig dovecot-2.2.29.1.tar.gz gpg: Signature made Wed 12 Apr 2017 12:40:03 PM CEST using DSA key ID 40558AC9 gpg: Can't check signature: public key not found
root@dc:/usr/local/src# gpg --search-keys 40558AC9 gpg: searching for "40558AC9" from hkp server keys.gnupg.net (1) Timo Sirainen <tss@iki.fi> 1024 bit DSA key 40558AC9, created: 2002-05-25, expires: 2003-05-25 (expired)
It's this one. Weird that nobody has complained about it being expired. Also in my keyring it expires "never". I tried pushing the key now, but not sure if it's slow or if it just doesn't work. Maybe I need to set some explicit expire date.
Although I'm planning to replace the Dovecot signing key at some point anyway..