On 12 Apr 2017, at 22.25, Ralf Zimmermann <r.zimmerm...@siegnetz.de> wrote: > > Hi, > > is there a newer public key available? > > root@dc:/usr/local/src# gpg --verify dovecot-2.2.29.1.tar.gz.sig > dovecot-2.2.29.1.tar.gz > gpg: Signature made Wed 12 Apr 2017 12:40:03 PM CEST using DSA key ID 40558AC9 > gpg: Can't check signature: public key not found > > root@dc:/usr/local/src# gpg --search-keys 40558AC9 > gpg: searching for "40558AC9" from hkp server keys.gnupg.net > (1) Timo Sirainen <t...@iki.fi> > 1024 bit DSA key 40558AC9, created: 2002-05-25, expires: 2003-05-25 > (expired)
It's this one. Weird that nobody has complained about it being expired. Also in my keyring it expires "never". I tried pushing the key now, but not sure if it's slow or if it just doesn't work. Maybe I need to set some explicit expire date. Although I'm planning to replace the Dovecot signing key at some point anyway..