According to the announce [1], Squid 4.0.16 and later should be signed
by the new key B06884EDB779C89B044E64E3CD6DBF8EF3B17D3E, but it is still
signed by the old Squid 3 key EA31CC5E9488E5168D2DCC5EB268E706FF5CF463:
$ gpg2 --verify squid-4.0.16.tar.xz.asc squid-4.0.16.tar.xz
gpg: Signature made Sun 30 Oct 2016 07:45:12 PM UZT
gpg: using RSA key B268E706FF5CF463
gpg: Good signature from "Amos Jeffries <amos@xxxxxxxxxxxxx>" [ultimate]
gpg: aka "Amos Jeffries (Squid 3.0 Release Key)
<squid3@xxxxxxxxxxxxx>" [ultimate]
gpg: aka "Amos Jeffries (Squid 3.1 Release Key)
<squid3@xxxxxxxxxxxxx>" [ultimate]
gpg: aka "Amos Jeffries <squid3@xxxxxxxxxxxxx>"
[ultimate]
[1]
http://lists.squid-cache.org/pipermail/squid-users/2016-October/013299.html
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users