|
|
|
@ -2,11 +2,11 @@ Changing expiry of the amprolla3 key |
|
|
|
==================================== |
|
|
|
(rrq: 2022-09-03) |
|
|
|
|
|
|
|
NOTE: The amprolla3 origin key is located at amprolla, owned by |
|
|
|
~amprolla, and held in the pgp "homedir" ~/amprolla/gnupg |
|
|
|
NOTE: The amprolla3 singing keys are located at amprolla, owned by ~amprolla, |
|
|
|
and held in the pgp "homedir" ~/amprolla/gnupg |
|
|
|
|
|
|
|
Log on to amprolla as ~amprolla, and cd to ~/amprolla. |
|
|
|
Change the expiry of the primary key and of the subkey: |
|
|
|
Log on to amprolla as ~amprolla, and cd to ~/amprolla. Create a new key or |
|
|
|
change the expiry of an existing primary key and of the subkey: |
|
|
|
|
|
|
|
$ gpg --homedir gnupg/ --edit-key BB23C00C61FC752C |
|
|
|
gpg> key 0 |
|
|
|
@ -19,20 +19,21 @@ Change the expiry of the primary key and of the subkey: |
|
|
|
|
|
|
|
$ gpg --homedir gnupg/ -a --export BB23C00C61FC752C > x.gpg |
|
|
|
|
|
|
|
Now x.pgp is the public key that should be imported into |
|
|
|
devuan-keyring.gpg in the devuan-keyring package. |
|
|
|
Now x.pgp is the public key that should be imported into the devuan-keyring |
|
|
|
package. |
|
|
|
|
|
|
|
Update devuan-keyring |
|
|
|
--------------------- |
|
|
|
|
|
|
|
Clone this devuan-keyring project. It has its keyrings in the |
|
|
|
"keyrings" subdirectory. Copy the above "x.gpg" from amprolla into |
|
|
|
here, and then import it into the keyring with the following: |
|
|
|
Clone this devuan-keyring project. The keyrings are generated from the public |
|
|
|
keys with extension `.gpg` in the subdirectories below `public_keys`: |
|
|
|
|
|
|
|
$ gpg --no-default-keyring --homedir keyrings --keyring devuan-keyring.gpg --import x..gpg |
|
|
|
`individuals` -> devuan-keyring.gpg |
|
|
|
`archive` -> devuan-archive-keyring.gpg |
|
|
|
`removed` -> devuan-removed-keys.gpg |
|
|
|
|
|
|
|
Place the new key in a file into the relevant directory. Obsolete keys can be |
|
|
|
moved to `removed` rather than deleted. |
|
|
|
|
|
|
|
Add a note and version bump in debian/changelog before building the |
|
|
|
Commit changes and update debian/changelog before building the |
|
|
|
devuan-keyring package for unstable. |
|
|
|
|
|
|
|
Once deployed to dak for unstable, the keyring needs to be propagated |
|
|
|
to all current distributions. |
|
|
|
|
