the autobuild gpg key expired!

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi all-

For some silly reason I made the GPG key used to sign autobuild packages 
from git expire after 1 year... a year ago today.  Which broke the builds 
this afternoon, and may be causing warnings from anyone using those 
packages.  (Note that official release packages are not affected!)

The Ubuntu keys that sign cd images and such have no expiry; the Debian 
keys expire after 15-20 years.  Since these packages are only 
quasi-trusted (they are automatically built from branches in git, after 
all), just setting no expiry is simplest.  Our future selves exactly N 
years in an alternate timeline will surely agree.

The key in question is

pub   1024D/03C3951A 2011-02-08
uid                  Ceph automated package build (Ceph automated package build) <sage@xxxxxxxxxxxx>
sub   4096g/2E457B51 2011-02-08

If you previously installed this as a trusted key on your system, the 
key can be updated (or newly installed) with

 wget -q -O- https://raw.github.com/ceph/ceph/master/keys/autobuild.asc | sudo apt-key add -

If you only install *release* packages (not bleeding edge code), you can 
ignore all of this; *that* key (17ED316D) has no expiry:

pub   4096R/17ED316D 2012-05-20
uid                  Ceph Release Key <sage@xxxxxxxxxxxx>

sage

--
To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [CEPH Users]     [Ceph Large]     [Information on CEPH]     [Linux BTRFS]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]
  Powered by Linux