gpg4win expired code signing cert; please renew.

[Werner Koch]

On Fri, 17 Oct 2025 09:19, have--- said:

> I reported a real-world cert validation error on a Microsoft platform,
> of Gpg4win 5 beta.  The latest gpg4win-beta package (369) was
> published 2025-09-05, two months after cert expiry — thus, **the

Nope.  Your system is not up to date or something else is wrong at your
site.  Here is the result on a freshly installed Windows 11 box:

  Sigcheck v2.80 - File version and signature viewer
  Copyright (C) 2004-2020 Mark Russinovich
  Sysinternals - www.sysinternals.com
  
  H:\gpg4win-5.0.0-beta369.exe:
          Verified:       Signed
          Signing date:   14:07 05/09/2025
          Publisher:      g10 Code GmbH
          Company:        g10 Code GmbH
          Description:    Gpg4win: The GNU Privacy Guard and Tools for Windows
          Product:        Gpg4win (5.0.0-beta369)
          Prod version:   n/a
          File version:   5.0.0.31191
          MachineType:    32-bit
          Binary Version: 5.0.0.31191
          Original Name:  n/a
          Internal Name:  n/a
          Copyright:      Copyright (C) 2024 g10 Code GmbH
          Comments:       Gpg4win is Free Software; you can redistribute it  and/or modify it under the terms of the GNU General Public License.  You should have received a copy of the GNU General Public License  along with this software; if not, write to the Free Software  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,  MA 02110-1301, USA
          Entropy:        7.999

And if you use the GUI you can clearly see that a new certificate is
used [1].


Salam-Shalom,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 2025-10-17-sc.png
Type: image/png
Size: 46680 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20251017/a9033168/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openpgp-digital-signature.asc
Type: application/pgp-signature
Size: 284 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20251017/a9033168/attachment-0001.sig>