Is there a problem signing your files ?

General
1

Hello,

I downloaded on your site SyncTrayzorPortable-x64.zip and the SHA1 and SHA512 hashes are correct. But when I check the signature of the files sha1sum.txt.asc and sha512sum.txt.asc themselves with the public key D26E6ED000654A3E given on your site. I have the return that they were signed with another key: FE6ADC8AE112FA6A.

Is this normal since you talk about another older key on your site page ?

Thanks

gpg --verify sha1sum.txt.asc
gpg: Signature faite le sam. 07 août 2021 14:11:16 CEST
gpg:                avec la clef RSA FE6ADC8AE112FA6A
gpg:                issuer "antony.male@gmail.com"
gpg: Impossible de vérifier la signature : Pas de clef publique
2

SyncTrayzor is a separate project, signing will be by the author.

3

ok and where to find the author key. Do you know ? I searched but couldn’t find…

4

It’s in the SyncTrayzor repository: SyncTrayzor/security at master · canton7/SyncTrayzor · GitHub

5

Yes I saw. But impossible to download the key of the author by refusal of GPG because of a defect of identity of the key. (lack)

Unusable

PS: I sent him a mail to warn him

6

Here is its key:

https://keyserver.ubuntu.com/pks/lookup?search=FE6ADC8AE112FA6A&fingerprint=on&op=index