mirror of
https://github.com/gentoo-mirror/gentoo.git
synced 2026-01-05 14:07:27 -08:00
Andreas' key is expired, as discovered when trying to package the next
alpha.
```
* Verifying patch-2.7.6_p20250206.tar.xz ...
ERROR OpenPGP verification failed for <_io.BufferedReader name='/var/tmp/portage/sys-devel/patch-2.7.6_p20250206/distdir/patch-2.7.6_p20250206.tar.xz'> (sig in
/var/tmp/portage/sys-devel/patch-2.7.6_p20250206/distdir/patch-2.7.6_p20250206.tar.xz.sig):
OpenPGP signature rejected because of expired key:
gpg: Signature made Thu 06 Feb 2025 08:40:43 PM UTC
gpg: using RSA key 259B3792B3D6D319212CC4DCD5BF9FEB0313653A
gpg: Good signature from "Andreas Gruenbacher <agruen@gnu.org>" [expired]
gpg: aka "Andreas Gruenbacher <agruen@kernel.org>" [expired]
gpg: aka "Andreas Gruenbacher <agruenba@redhat.com>" [expired]
gpg: aka "Andreas Gruenbacher <andreas.gruenbacher@gmail.com>" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: 259B 3792 B3D6 D319 212C C4DC D5BF 9FEB 0313 653A
```
After bumping PV to get a fresh savannah.gnu.org download I also
temporarily ported both ebuilds to my work-in-progress "sec-keys.eclass"
and verified that both packages contained the same set of keys. That
change isn't included here since the eclass hasn't been merged yet,
sorry!
Acked-by: Sam James <sam@gentoo.org>
Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>