Why is there no signature (fanquaqe)in bitcoincore?

[Muromskiy]

Hello friends! Why is there no fanquake signature (gpg --verify SHA256SUMS.asc) in bitcoincore 28.1 ? Is it worth worrying about?
I'm checking the validity of the version on macbook 28.0 - fanquaqe is present in it.

[DireWolfM14]

Hello friends! Why is there no fanquake signature (gpg --verify SHA256SUMS.asc) in bitcoincore 28.1 ? Is it worth worrying about?
I'm checking the validity of the version on macbook 28.0 - fanquaqe is present in it.

I wouldn't worry about it.  AFAIK most of the developers volunteer their time, so in this case it could simply be that fanquake hasn't had time to review the code and sign the hashes.

[BitMaxz]

Have you imported the PGP key of the fanquake?

They move all their keys to a new path; you better check them all here: https://github.com/bitcoin-core/guix.sigs/tree/main

You can download the fanquake builder key(PGP key) here: https://github.com/bitcoin-core/guix.sigs/tree/main/builder-keys
and download all fanquake signature from this link: https://github.com/bitcoin-core/guix.sigs/tree/main/28.1/fanquake

To verify, use this command, make sure you are in the same folder:

Code:

gpg --verify all.SHA256SUMS.asc

Let me know the result.

[achow101]

fanquake made his signatures a bit late; the SHA256SUMS.asc file was generated and the binaries uploaded before fanquake's sigs were added to the guix.sigs repo.

The release is still signed by several other developers, including myself. There's nothing to worry about, not everyone is able to do a build and made signatures in time.

[Muromskiy]

fanquake made his signatures a bit late; the SHA256SUMS.asc file was generated and the binaries uploaded before fanquake's sigs were added to the guix.sigs repo.

The release is still signed by several other developers, including myself. There's nothing to worry about, not everyone is able to do a build and made signatures in time.

[Muromskiy]

Have you imported the PGP key of the fanquake?

They move all their keys to a new path; you better check them all here: https://github.com/bitcoin-core/guix.sigs/tree/main

You can download the fanquake builder key(PGP key) here: https://github.com/bitcoin-core/guix.sigs/tree/main/builder-keys
and download all fanquake signature from this link: https://github.com/bitcoin-core/guix.sigs/tree/main/28.1/fanquake

To verify, use this command, make sure you are in the same folder:

Code:

gpg --verify all.SHA256SUMS.asc

Let me know the result.

yes. I imported the fanquaqe key from github. I have other keys too. Maybe the ones in the terminal check list will be enough without fanquaqe?