[issue30992] Invalid PGP Key Prevents Archive Validation

2017-07-28 Thread Ned Deily
Ned Deily added the comment: P.S., the pubkeys.txt file on python.org and the "OpenPGP Public Keys" section of https://www.python.org/downloads/ have now been updated. -- ___ Python tracker ___

[issue30992] Invalid PGP Key Prevents Archive Validation

2017-07-28 Thread Ned Deily
Ned Deily added the comment: Thanks for the report. I have opened https://github.com/python/pythondotorg/pull/1109 to remove the obsolete MD5 key from the pubkeys file. Until the updated file is deployed and the website page updated, another workaround may be to use the --allow-weak-digest-a

[issue30992] Invalid PGP Key Prevents Archive Validation

2017-07-22 Thread Chris White
New submission from Chris White: When trying to validate the Python 3.6.1 tgz using the ASC file, I can't import all the keys due to the following error: ``` gpg: Note: signatures using the MD5 algorithm are rejected gpg: key ED9D77D5: no valid user IDs gpg: this may be caused by a missing self