Bug 490447

Summary:	Windows builds: no GPG signatures and/or AuthentiCode signatures
Product:	[Applications] krita	Reporter:	ed4a1d56-64fb-49ed-9ed9-205cad01f353
Component:	* Unknown	Assignee:	Krita Bugs <krita-bugs-null>
Status:	RESOLVED FIXED
Severity:	normal	CC:	dimula73, halla
Priority:	NOR
Version First Reported In:	unspecified
Target Milestone:	---
Platform:	Other
OS:	Microsoft Windows
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description ed4a1d56-64fb-49ed-9ed9-205cad01f353 2024-07-18 11:41:45 UTC

Version: 5.2.3

The downloads page https://download.kde.org/stable/krita/5.2.3/ does not contain GPG signatures for Windows build. This makes it impossible to verify authenticity of installer.

Also, the installer is not signed with AuthentiCode. If you have resources available, please consider implementing this as well.

Thanks!

Comment 1 Dmitry Kazakov 2024-07-18 11:56:02 UTC

Hi, anonaddy!

Thank you for the report. Yes, we are aware of this issue and are working on the fix. We are going to update the release tomorrow (if everythign goes well)

Comment 2 ed4a1d56-64fb-49ed-9ed9-205cad01f353 2024-07-18 11:57:33 UTC

Thank you very much!