netfilter release signing keys

netfilter release signing keys

[Adam Sampson]

Hi,

(I sent this to webmaster@netfilter.org as suggested on
http://netfilter.org/about.html, but that address bounced.)

The latest iptables release is signed with key ID BB5F58CC:

http://www.netfilter.org/projects/iptables/files/iptables-1.4.11.tar.bz2.sig

The "key" link next to that on the iptables downloads page points to:

http://www.netfilter.org/files/coreteam-gpg-key.txt

However, that key is CA9A8D5B.

On the "About" page, it says that the current key is 2D0987E6 and gives
a revocation certificate for CA9A8D5B. It says that 2D0987E6 "will be
valid until March 27, 2011", so I guess that someone's generated a new
key and not updated the About page or download links yet. Please could
someone confirm that BB5F58CC is a legitimate key for iptables releases,
and update the web pages?

Thanks,

-- 
Adam Sampson <ats@offog.org>                         <http://offog.org/>

Re: netfilter release signing keys

[Pablo Neira Ayuso]

On 09/06/11 10:30, Adam Sampson wrote:
> Hi,
> 
> (I sent this to webmaster@netfilter.org as suggested on
> http://netfilter.org/about.html, but that address bounced.)
> 
> The latest iptables release is signed with key ID BB5F58CC:
> 
> http://www.netfilter.org/projects/iptables/files/iptables-1.4.11.tar.bz2.sig
> 
> The "key" link next to that on the iptables downloads page points to:
> 
> http://www.netfilter.org/files/coreteam-gpg-key.txt
> 
> However, that key is CA9A8D5B.
> 
> On the "About" page, it says that the current key is 2D0987E6 and gives
> a revocation certificate for CA9A8D5B. It says that 2D0987E6 "will be
> valid until March 27, 2011", so I guess that someone's generated a new
> key and not updated the About page or download links yet. Please could
> someone confirm that BB5F58CC is a legitimate key for iptables releases,
> and update the web pages?

I'll announce the new keys soon, sorry.