Bug 399142

Summary: gpg signature can't be verified
Product: [Applications] krita Reporter: Antonio Rojas <arojas>
Component: GeneralAssignee: Krita Bugs <krita-bugs-null>
Status: RESOLVED FIXED    
Severity: normal CC: halla
Priority: NOR    
Version: 4.1.3   
Target Milestone: ---   
Platform: Other   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:

Description Antonio Rojas 2018-09-27 13:01:24 UTC
The 4.1.3 tarball is signed with a different key than older releases (999C5EF86C5A70E5). The public key is not available in the public servers and I can't find it on krita.org either, so there is no way to verify the signature.
Comment 1 Halla Rempt 2018-09-27 13:50:40 UTC
Oh dash it... You are right. My desktop computer broke, and I had forgotten that that was the computer I used to sign the releases.
Comment 2 Halla Rempt 2018-09-30 11:44:13 UTC
I got the key from my old desktop and made new .sig files, but they aren't on the mirrors yet, of course. But at least they were made as foundation@krita.org, not boud@valdyas.org