Bug 490447 - Windows builds: no GPG signatures and/or AuthentiCode signatures
Summary: Windows builds: no GPG signatures and/or AuthentiCode signatures
Status: RESOLVED FIXED
Alias: None
Product: krita
Classification: Applications
Component: * Unknown (show other bugs)
Version: unspecified
Platform: Other Microsoft Windows
: NOR normal
Target Milestone: ---
Assignee: Krita Bugs
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-07-18 11:41 UTC by ed4a1d56-64fb-49ed-9ed9-205cad01f353
Modified: 2024-07-27 08:01 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:

Attachments
Add an attachment

Note You need to log in before you can comment on or make changes to this bug.
Description ed4a1d56-64fb-49ed-9ed9-205cad01f353 2024-07-18 11:41:45 UTC 
Version: 5.2.3

The downloads page https://download.kde.org/stable/krita/5.2.3/ does not contain GPG signatures for Windows build. This makes it impossible to verify authenticity of installer.

Also, the installer is not signed with AuthentiCode. If you have resources available, please consider implementing this as well.

Thanks!
Comment 1 Dmitry Kazakov 2024-07-18 11:56:02 UTC 
Hi, anonaddy!

Thank you for the report. Yes, we are aware of this issue and are working on the fix. We are going to update the release tomorrow (if everythign goes well)
Comment 2 ed4a1d56-64fb-49ed-9ed9-205cad01f353 2024-07-18 11:57:33 UTC 
Thank you very much!