[wp-trac] [WordPress Trac] #49004: WordPress core and all plugin updates having error: The authenticity of wordpress-5.3.1-partial-0.zip could not be verified as no signature was found.

WordPress Trac noreply at wordpress.org
Mon Dec 16 18:36:49 UTC 2019


#49004: WordPress core and all plugin updates having error: The authenticity of
wordpress-5.3.1-partial-0.zip could not be verified as no signature was
found.
-----------------------------+----------------------
 Reporter:  toggerybob       |       Owner:  (none)
     Type:  defect (bug)     |      Status:  closed
 Priority:  normal           |   Milestone:
Component:  Upgrade/Install  |     Version:  5.3.1
 Severity:  major            |  Resolution:  invalid
 Keywords:                   |     Focuses:
-----------------------------+----------------------
Changes (by desrosj):

 * milestone:  Awaiting Review =>


Comment:

 Hi @toggerybob,

 Signature verification is not yet enabled, so this message is expected to
 be displayed.

 [44954] introduced experimental package signature verification. However,
 there were some difficult problems identified that need to be solved in
 order to securely use this feature in practice. You can read more about
 this here https://make.wordpress.org/core/2019/08/16/ssl-for-auto-
 updates/.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/49004#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list