View Issue Details

IDProjectCategoryView StatusLast Update
0022269mantisbtsecuritypublic2020-01-02 07:40
Reportercm_bt Assigned Tovboctor  
Status assignedResolutionopen 
Summary0022269: Public key for verification should be available

After downloading the software package for Mantis, you should be able to verify the signature. The signature can be downloaded too (for example mantisbt-1.3.5.tar.gz.asc). But to verify it, you need to know the public key. The key ID is 0A45E2D6. The key should be uploaded to key-servers and it should be somewhere on The keys fingerprint should also be publicly available.

In the documentation there should be some short information how to test the signature, for example here:

TagsNo tags attached.


has duplicate 0025720 closedatrol Public key ID 0A45E2D6 used to verify packages isn't available on public key server 
related to 0026544 closedatrol SourceForge Files Cannot be Unzipped 




2019-04-27 08:06

developer   ~0062007

@vboctor you're the only one who can address this.

Issue History

Date Modified Username Field Change
2017-01-27 12:34 cm_bt New Issue
2019-04-27 07:03 atrol Relationship added has duplicate 0025720
2019-04-27 08:05 dregad Assigned To => vboctor
2019-04-27 08:05 dregad Status new => assigned
2019-04-27 08:06 dregad Note Added: 0062007
2020-01-02 03:51 dregad Relationship added related to 0026544