Pacman sign key has been expired

[KSR-Yasuda]

Existing issues matching what you're seeing

• I was not able to find an open or closed issue matching what I'm seeing

Git for Windows version

MSYS2 env (not Git-for-Windows env),
and using `git` package for MSYS2.

% pacman -Q | grep git
error: git-for-windows-x86_64: signature from "Johannes Schindelin <johannes.schindelin@gmx.de>" is unknown trust
git 2.53.0-1
git-extra 1.1.689.fe8c5259c-1
git-extras 7.4.0-1
git-flow 1.12.3-2
git-for-windows-keyring 1.1.3.eb5a809-1
mingw-w64-x86_64-libgit2 1.9.2-2

% git --version --build-options
git version 2.53.0
cpu: x86_64
no commit associated with this build
sizeof-long: 8
sizeof-size_t: 8
shell-path: /bin/sh
rust: disabled
gettext: enabled
libcurl: 8.18.0
OpenSSL: OpenSSL 3.6.1 27 Jan 2026
zlib: 1.3.1
SHA-1: SHA1_DC
SHA-256: SHA256_BLK
default-ref-format: files
default-hash: sha1

kk

Windows version

Windows 11

Windows CPU architecture

x86_64 (64-bit)

Additional Windows version information

Microsoft Windows [Version 10.0.26200.8037]
(11 Pro 25H2)

Options set during installation

MSYS2 env, referred to the old <https://github.com/git-for-windows/git/wiki/Install-inside-MSYS2-proper#please-note-that-this-scenario-is-not-officially-supported-by-git-for-windows>.


% pacman -Q msys2-runtime msys2-keyring
msys2-runtime 3.6.7-2
msys2-keyring 1~20260214-1

Other interesting things

The key E8325679DFFF09668AD8D7B67115A57376871B1C in
https://raw.githubusercontent.com/git-for-windows/build-extra/HEAD/git-for-windows-keyring/git-for-windows.gpg
looks expired on Mar-22.

I think it has to be updated to go well.

Terminal/shell

bash

Commands that trigger the issue

`pacman -Sy` and such.

Expected behaviour

pacman command goes successfully.

Actual behaviour

The key E8325679DFFF09668AD8D7B67115A57376871B1C looks expired on Mar-22.

% pacman -Sy
error: git-for-windows-x86_64: signature from "Johannes Schindelin <johannes.schindelin@gmx.de>" is unknown trust
:: Synchronizing package databases...
 mingw64                                         475.9 KiB   413 KiB/s 00:01 [-------------------------------------------] 100%
 msys is up to date
 git-for-windows-x86_64                           25.2 KiB  93.9 KiB/s 00:00 [-------------------------------------------] 100%
error: git-for-windows-x86_64: signature from "Johannes Schindelin <johannes.schindelin@gmx.de>" is unknown trust
error: failed to synchronize all databases (invalid or corrupted database (PGP signature))

% pacman-key --list-sigs johannes.schindelin@gmx.de
pub   rsa4096 2013-09-13 [SC]
      3B6D86A1BA7701CD0F23AED888138B9E1A9F3986
uid           [ultimate] Johannes Schindelin <johannes.schindelin@gmx.de>
sig 3        88138B9E1A9F3986 2013-09-13  [self-signature]
sig   L      54FC61702CA206FF 2023-09-06  Pacman Keyring Master Key <pacman@localhost>
sub   rsa4096 2013-09-13 [E]
sig          88138B9E1A9F3986 2013-09-13  [self-signature]
sub   rsa4096 2014-01-17 [S]
sig          88138B9E1A9F3986 2014-01-17  [self-signature]

pub   rsa4096 2021-03-23 [SC] [expired: 2026-03-22]
      E8325679DFFF09668AD8D7B67115A57376871B1C
uid           [ expired] Johannes Schindelin <johannes.schindelin@gmx.de>
sig 3        7115A57376871B1C 2021-03-23  [self-signature]

% wget -L https://raw.githubusercontent.com/git-for-windows/build-extra/HEAD/git-for-windows-keyring/git-for-windows.gpg
% pacman-key --verify git-for-windows.gpg
==> Checking git-for-windows.gpg... (embedded)
gpg: verify signatures failed: Unexpected error
==> ERROR: The signature verification for git-for-windows.gpg failed.

Repository

https://raw.githubusercontent.com/git-for-windows/build-extra/HEAD/git-for-windows-keyring/git-for-windows.gpg

[dscho]

Right, I also noticed that problem this morning because all of the sync workflow runs failed.

[KSR-Yasuda]

Confirmed now it works with the new key. Thank you!