Hi All,

Ignore below noise. I was doing the verify on the compressed file and in this case it didn't like that. I uncompressed the source file and redid the signature verification and got a good signature but with the note that it has expired.

Regards,

Adolf.


On 14/07/2021 15:00, Adolf Belka wrote:
> Hi All,
>
> I am looking to update the tftpd add-on. The existing version, 0.48, is from 2007. The most up to date version, 5.2, is from 2011.
>
> When I run gpg to verify the package signature I get the following response:-
>
> gpg: Signature made Sun 11 Dec 2011 23:14:47 CET
> gpg:                using RSA key 88AE647D58F7ABFE
> gpg: BAD signature from "H. Peter Anvin (kernel.org file signing key) <hpa(a)kernel.org>" [expired]
>
> I suspect that this is due to the key being from 2011 or earlier.
>
> It looks like there might be a couple of bug fixes in the changelog but I am not sure how important they might be:-
>
> Changes in 5.2:
>     Fix breakage on newer Linux when a single interface has
>     multiple IP addresses.
> Changes in 5.1:
>     Add -P option to write a PID file.  Patch by Ferenc Wagner.
>     Bounce the syslog socket in standalone mode, in case the
>     syslog daemon has been restarted.  Patch by Ferenc Wagner.
>     Build fixes.
>     Fix handling of block number wraparound after a successful
>     options negotiation.
>     Fix a buffer overflow in option parsing.
> Changes in 5.0:
>     Try to on platforms with getaddrinfo() without AI_ADDRCONFIG or
>     AI_CANONNAME.
>     Implement the "rollover" option, for clients which want block
>     number to rollover to anything other than zero.
>     Correctly disable PMTU in standalone mode.  Patch by Florian
>     Lohoff.
> Changes in 0.49:
>     Add IPv6 support.  Patch by Karsten Keil.
>     Support systems with editline instead of readline.
>     Support long options in the server.
>
> Unless someone comes back and suggests something different, I will leave tftpd as it currently is.
>
>
> Regards,
>
> Adolf
>