<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
</head>
<body bgcolor="#ffffff" text="#000000">
Guten Morgen!<br>
<br>
This happened in Monday 100201:<br>
Normally using Linux (Ubuntu) I also work with a Windows XP machine
(sp3), where I want to install gpg4win (latest working version). I
found this gpg4win-2.0.1.exe at <a class="moz-txt-link-freetext"
href="http://gpg4win.org/">http://gpg4win.org/</a>. However the
corresponding sig-file seems to be out of date and I don't want to
install this kind of software without beeing quite sure of validity and
trust.<br>
When I try to verify the distribution (from linux where I do have gpgv
installed, and some of the signer's unexpired keys) I got this:<br>
<small>lars@myubuntuno1:~$ gpg --verify
/home/lars/Desktop/gpg4win-2.0.1.exe.sig<br>
gpg: Signature made Mon 28 Sep 2009 06:47:45 PM CEST using RSA key ID
1CE0C630<br>
gpg: Good signature from "Werner Koch (dist sig) <a
class="moz-txt-link-rfc2396E" href="mailto:dd9jn@gnu.org"><dd9jn@gnu.org></a>"<br>
gpg: Note: This key has expired!<br>
Primary key fingerprint: 7B96 D396 E647 1601 754B E4DB 53B6 20D0 1CE0
C630<br>
lars@myubuntuno1:~$</small><br>
<br>
When I checked the actual key of the signer, I found that it had
expired the day before, 2010-01-31 (!).<br>
May be something had to be corrected?<br>
Can you give me some advices?<br>
<br>
Bästa hälsningar / Best Regards<br>
Lars Öberg<br>
+46 18 495 12 60<br>
+46 763 14 88 79 (m 3)<br>
+46 738 926 170 (m Comviq)<br>
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
</body>
</html>