Avatar for Username

Търсене в помощните статии

Избягвайте измамите при поддръжката. Никога няма да ви помолим да се обадите или изпратите SMS на телефонен номер или да споделите лична информация. Моля, докладвайте подозрителна активност на "Докладване за злоупотреба".

Научете повече

Тази тема беше архивирана. Моля, задайте нов въпрос ако имате нужда от помощ.

how can I validate Firefox authentication

  • 8 отговора
  • 2 имат този проблем
  • 1 изглед
  • Последен отговор от Mace2

Mace2
Mace2
more options

I have not been able to successfully authenticate the validity of Firefox 39 on a Mac. Using GPG tools service to validate it gives an error Failed:153. If I perform a command line "gpg --verify SHA512SUMS.asc gpg: assuming signed data in 'SHA512SUMS' gpg: Signature made Wed 1 Jul 03:23:48 2015 EDT using RSA key ID 15A0A4BC gpg: Good signature from "Mozilla Software Releases <releases@mozilla.org>" [unknown] gpg: Note: This key has expired! Primary key fingerprint: 2B90 598A 745E 992F 315E 22C5 8AB1 3296 3A06 537A 

    Subkey fingerprint: 5445 390E F5D0 C2EC FB8A  6201 057C C3EB 15A0 A4BC

Which is not valid since the public key has expired. Where can i get a valid public key? Has anyone performed the validation of Firefox successfully? If so how?

I have not been able to successfully authenticate the validity of Firefox 39 on a Mac. Using GPG tools service to validate it gives an error Failed:153. If I perform a command line "gpg --verify SHA512SUMS.asc gpg: assuming signed data in 'SHA512SUMS' gpg: Signature made Wed 1 Jul 03:23:48 2015 EDT using RSA key ID 15A0A4BC gpg: Good signature from "Mozilla Software Releases <releases@mozilla.org>" [unknown] gpg: Note: This key has expired! Primary key fingerprint: 2B90 598A 745E 992F 315E 22C5 8AB1 3296 3A06 537A Subkey fingerprint: 5445 390E F5D0 C2EC FB8A 6201 057C C3EB 15A0 A4BC Which is not valid since the public key has expired. Where can i get a valid public key? Has anyone performed the validation of Firefox successfully? If so how?

Избрано решение

Ben Hearsum is a Mozilla employee and the blog link posted by cor-el was in the bug report I linked.

Прочетете този отговор в контекста 👍 0

Всички отговори (8)

christ1
christ1
  • Top 25 Contributor
more options

Good point. I do get the same result. The subkey used to sign the *SUMS file has expired on 07/16/15, and I guess nobody at Mozilla has noticed that (yet). The best would probably be to raise a new bug for this in Bugzilla. https://bugzilla.mozilla.org

Променено на от christ1

James
James
  • Moderator
  • Top 10 Contributor
more options

Oh they know.

For reading as the general issue tracker Bugzilla is not a discussion forum like here.

Bug 1139929 - renew gpg signing key

Mace2
Mace2 Задаващият въпроса
more options

Is the new public key available ? Where can I get it

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

See also:

the-edmeister
the-edmeister
  • Moderator
more options

http://hearsum.ca/blog/mozilla-software-release-gpg-key-transition.html

Mace2
Mace2 Задаващият въпроса
more options

The current Public key listed from the download firefox versions "https://ftp.mozilla.org/pub/mozilla.org/firefox/releases/39.0/"

as well as the others is still incorrect. You don't expect people to download a public key from a Blog?

James
James
  • Moderator
  • Top 10 Contributor
more options

Избрано решение

Ben Hearsum is a Mozilla employee and the blog link posted by cor-el was in the bug report I linked.

Mace2
Mace2 Задаващият въпроса
more options

All previous versions of firefox 39 will not be able to authenticate until the key is updated.