Apache famous HTTP server download website notoriously triggers expired keys validation – GPG:

gpg --verify apr-1.7.0.tar.gz.asc
gpg: assuming signed data in 'apr-1.7.0.tar.gz'
gpg: Signature made 2019 m. balandžio 01 d. 20:56:25 EEST
gpg:                using RSA key 1E1F909911C78735
gpg: Good signature from "William A. Rowe, Jr. <wrowe@rowe-clan.net>" [expired]
gpg:                 aka "William A. Rowe, Jr. <wrowe@apache.org>" [expired]
gpg:                 aka "William A. Rowe, Jr. <wrowe@pivotal.io>" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: B1B9 6F45 DFBD CCF9 7401  9235 193F 180A B55D 9977
     Subkey fingerprint: 41E0 4A4F 57D8 2401 C81F  4FED 1E1F 9099 11C7 8735

Before issued:

gpg --fingerprint 1E1F909911C78735

Sub-sequentially to

gpg --verify apr-1.7.0.tar.gz.asc
gpg: assuming signed data in 'apr-1.7.0.tar.gz'          
gpg: Signature made 2019 m. balandžio 01 d. 20:56:25 EEST
gpg:                using RSA key 1E1F909911C78735                             
gpg: Can't check signature: No public key
gpg --recv-keys --keyserver keys.gnupg.net 1E1F909911C78735
gpg: key 193F180AB55D9977: 1 duplicate signature removed                   
gpg: key 193F180AB55D9977: 1 signature reordered                           
gpg: key 193F180AB55D9977: public key "William A. Rowe, Jr. <wrowe@rowe-clan.net
>" imported
gpg: Total number processed: 1                                                  
gpg:               imported: 1

As said:

gpg --fingerprint 1E1F909911C78735
pub   rsa4096 2008-04-09 [SC] [expired: 2020-07-08]
      B1B9 6F45 DFBD CCF9 7401  9235 193F 180A B55D 9977
uid           [ expired] William A. Rowe, Jr. <wrowe@rowe-clan.net>
uid           [ expired] William A. Rowe, Jr. <wrowe@apache.org>
uid           [ expired] William A. Rowe, Jr. <wrowe@pivotal.io>

So, you see several expired warnings, which doesn’t make sense convincing this is very reliable.

This is due to having in mind, apr & apr-util are the main dependencies of the httpd itself, making them sit (reside) in its source contributory folder. So, glad days of Oktoberfest are way off the load.

https://9gag.com/gag/a6KNWAA

%d bloggers like this: