[wp-trac] [WordPress Trac] #51672: Message during update 5.5.1->5.5.2 : authenticity could not be verified as no signature was found

WordPress Trac noreply at wordpress.org
Fri Oct 30 14:42:51 UTC 2020


#51672: Message during update 5.5.1->5.5.2 : authenticity could not be verified as
no signature was found
-----------------------------+----------------------
 Reporter:  mulli.bahr       |       Owner:  (none)
     Type:  defect (bug)     |      Status:  closed
 Priority:  normal           |   Milestone:
Component:  Upgrade/Install  |     Version:  5.2
 Severity:  normal           |  Resolution:  wontfix
 Keywords:  has-screenshots  |     Focuses:
-----------------------------+----------------------
Changes (by desrosj):

 * status:  new => closed
 * resolution:   => wontfix
 * version:  5.5.1 => 5.2
 * component:  General => Upgrade/Install
 * milestone:  Awaiting Review =>


Comment:

 Thanks for pointing out this message, @mullibahr!

 The WordPress team and contributors have been working on a way to
 [https://make.wordpress.org/core/2019/05/17/security-in-5-2/
 cryptographically sign WordPress updates] as a way to add an extra level
 of security when updating (which would verify the update package has not
 changed in transport from WordPress.org servers to your website’s server).

 This message will show until the approach is finalized and the code that
 verifies the signature is changed to require the verification to pass.
 Until then, there’s nothing to worry about! Your site is secure, and any
 issues that you may be experiencing are not highly likely to be unrelated
 to that message.

 Closing this out as this is intended behavior.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/51672#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list