After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 762640 - The signature of gimp-2.8.16-setup-1.exe is corrupt or invalid... (due to only being signed with SHA-1)
The signature of gimp-2.8.16-setup-1.exe is corrupt or invalid... (due to onl...
Status: RESOLVED FIXED
Product: GIMP
Classification: Other
Component: Windows Installer
2.8.16
Other All
: Normal normal
: 2.8
Assigned To: GIMP Bugs
Jernej Simončič
Depends on:
Blocks:
 
 
Reported: 2016-02-24 18:54 UTC by ashlorn777
Modified: 2016-03-30 21:49 UTC
See Also:
GNOME target: ---
GNOME version: ---



Description ashlorn777 2016-02-24 18:54:10 UTC
Once the download was complete, I received this error message - "The signature of gimp-2.8.16-setup-1.exe is corrupt or invalid", and prompts for deletion.  On a Surface Pro 4 with Win10.
Comment 1 Michael Schumacher 2016-02-26 16:27:18 UTC
Are you using the Microsoft Edge browser? 

Has been identified as the trigger in https://twitter.com/bfritchie/status/703241740497526785 - maybe they got a reason for this, maybe not.
Comment 2 Curtis Gray 2016-03-09 19:16:35 UTC
Same issue using IE 11 on Win 7
Comment 3 Michael Schumacher 2016-03-09 19:24:12 UTC
So, does one of you know what exactly the Microsoft browsers don't like about the existing signature?
Comment 4 Curtis Gray 2016-03-09 19:28:01 UTC
Michael, I don't know what the issue is, but I just went back and downloaded the 22-November-15 version instead of the instead of the 18-February-2016 version, and did not have the problem. Since the version numbers seem to be the same for those, at least it will give you something to compare. I am an IT Manager with 30+ years experience, so am glad to help if I can. Just let me know.
Comment 5 Michael Schumacher 2016-03-10 07:00:09 UTC
The issue seems to be SHA-1 vs. SHA-2.
https://github.com/git-for-windows/git/issues/592
Comment 6 Michael Natterer 2016-03-30 21:49:26 UTC
A new build with correct signature has been released -> FIXED.