Avatar for Username

Претражи подршку

Избегните преваре подршке. Никада од вас нећемо тражити да зовете или шаљете поруке на број или да делите личне податке. Пријавите сумњиве радње преко „Пријавите злоупотребу” опције.

Learn More

Ова тема је архивирана. Питајте друго питање ако вам је потребна помоћ.

how can I validate Firefox authentication

  • 8 одговорa
  • 2 имају овај проблем
  • 53 прегледа
  • Последњи одговор послао Mace2

Mace2
Mace2
more options

I have not been able to successfully authenticate the validity of Firefox 39 on a Mac. Using GPG tools service to validate it gives an error Failed:153. If I perform a command line "gpg --verify SHA512SUMS.asc gpg: assuming signed data in 'SHA512SUMS' gpg: Signature made Wed 1 Jul 03:23:48 2015 EDT using RSA key ID 15A0A4BC gpg: Good signature from "Mozilla Software Releases <releases@mozilla.org>" [unknown] gpg: Note: This key has expired! Primary key fingerprint: 2B90 598A 745E 992F 315E 22C5 8AB1 3296 3A06 537A 

    Subkey fingerprint: 5445 390E F5D0 C2EC FB8A  6201 057C C3EB 15A0 A4BC

Which is not valid since the public key has expired. Where can i get a valid public key? Has anyone performed the validation of Firefox successfully? If so how?

I have not been able to successfully authenticate the validity of Firefox 39 on a Mac. Using GPG tools service to validate it gives an error Failed:153. If I perform a command line "gpg --verify SHA512SUMS.asc gpg: assuming signed data in 'SHA512SUMS' gpg: Signature made Wed 1 Jul 03:23:48 2015 EDT using RSA key ID 15A0A4BC gpg: Good signature from "Mozilla Software Releases <releases@mozilla.org>" [unknown] gpg: Note: This key has expired! Primary key fingerprint: 2B90 598A 745E 992F 315E 22C5 8AB1 3296 3A06 537A Subkey fingerprint: 5445 390E F5D0 C2EC FB8A 6201 057C C3EB 15A0 A4BC Which is not valid since the public key has expired. Where can i get a valid public key? Has anyone performed the validation of Firefox successfully? If so how?

Изабрано решење

Ben Hearsum is a Mozilla employee and the blog link posted by cor-el was in the bug report I linked.

Прочитајте овај одговор са објашњењем 👍 0

Сви одговори (8)

christ1
christ1
  • Top 25 Contributor
more options

Good point. I do get the same result. The subkey used to sign the *SUMS file has expired on 07/16/15, and I guess nobody at Mozilla has noticed that (yet). The best would probably be to raise a new bug for this in Bugzilla. https://bugzilla.mozilla.org

Измењено од стране christ1

James
James
  • Top 25 Contributor
  • Moderator
more options

Oh they know.

For reading as the general issue tracker Bugzilla is not a discussion forum like here.

Bug 1139929 - renew gpg signing key

Mace2
Mace2 Власник питања
more options

Is the new public key available ? Where can I get it

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

See also:

the-edmeister
the-edmeister
  • Moderator
more options

http://hearsum.ca/blog/mozilla-software-release-gpg-key-transition.html

Mace2
Mace2 Власник питања
more options

The current Public key listed from the download firefox versions "https://ftp.mozilla.org/pub/mozilla.org/firefox/releases/39.0/"

as well as the others is still incorrect. You don't expect people to download a public key from a Blog?

James
James
  • Top 25 Contributor
  • Moderator
more options

Одабрано решење

Ben Hearsum is a Mozilla employee and the blog link posted by cor-el was in the bug report I linked.

Mace2
Mace2 Власник питања
more options

All previous versions of firefox 39 will not be able to authenticate until the key is updated.