Re: (Guile-SDL) release signing key

[Thien-Thi Nguyen]

() Thiago Jung Bauermann via bug-guile-sdl <bug-guile-sdl@gnu.org>
() Sun, 19 Jun 2022 20:54:59 -0300

   I'd just like to report an issue I had when trying to verify
   the signature for version 0.6.1's release: I downloaded the
   key from Thien-Thi Nguyen's Savannah user page¹ and while it
   worked, GnuPG warned me that the key is expired: [...]

Thanks for checking.

   So I have a few suggestions:

   1. Take the opportunity to move to a current algorithm and
      key length.  AFAIK 1024-bit DSA is considered weak
      nowadays. Or if this is undesired, update the key with a
      new expiry date.

I'll look into this at some point (but not now).  What (better)
algorithm and key length do you suggest?

   2. Update the key on the Savannah user page.

I've done this.  Please try the latest and see if it behaves as
expected.

   3. Mention on Guile-SDL website which public key is used to
      sign releases, and how to obtain and verify it.

Good idea.  I'll do that shortly.

   Thank you for providing this new release! It fixed a
   long-standing bug reported on GNU Guix: “guile-sdl-0.5.2
   fails to install on i686”².

Glad to hear that!  Please see also Guile-SDL Demos for examples
of how to use Guile-SDL:

- https://www.gnuvola.org/software/guile-sdl-demos/

(You can report problems there to this mailing list, as well.)

-- 
Thien-Thi Nguyen -----------------------------------------------
 (defun responsep (query)               ; (2022) Software Libero
   (pcase (context query)               ;       = Dissenso Etico
     (`(technical ,ml) (correctp ml))
     ...))                              748E A0E8 1CB8 A748 9BFA
--------------------------------------- 6CE4 6703 2224 4C80 7502