Key for signing release tarballs has been revoked

Yubico / libfido2

Provides library functionality for FIDO2, including communication with a device over USB or NFC.

Other

590 stars 152 forks source link

Closed lazka closed 2 years ago

lazka commented 2 years ago

==> Verifying source file signatures with gpg...
    libfido2-1.11.0.tar.gz ... FAILED (public key A166878817F3906C has been revoked)

martelletto commented 2 years ago

Thank you for the report. I have asked my colleagues to re-sign the tarballs with a valid PGP key. Apologies for the breakage.

lazka commented 2 years ago

Thanks, no problem. You might also want to remove the key from the list at https://developers.yubico.com/Software_Projects/Software_Signing.html or move it down to the old key list.

kongeo commented 2 years ago