Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 644742 - Snapshot signing key expires in <6 mo.
Summary: Snapshot signing key expires in <6 mo.
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Infrastructure
Classification: Unclassified
Component: Other (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Infrastructure
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-01-16 10:31 UTC by Michał Górny
Modified: 2018-07-02 03:22 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2018-01-16 10:31:27 UTC 
pub   rsa4096/0xDB6B8C1F96D8BF6D 2011-11-25 [C] [expires: 2018-07-01]
      DCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D
uid                   [ unknown] Gentoo Portage Snapshot Signing Key (Automated Signing Key)
sub   rsa4096/0xEC590EEAC9189250 2011-11-25 [S] [expires: 2018-07-01]


Given that we're now using it to sign rsync Manifests, it would be good to have it renewed every 6 mo., and that combined with app-crypt/gentoo-keys update so that people can upgrade it while the 'old' key is still valid.
Comment 1 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2018-07-01 23:09:55 UTC 
This key was already updated on 2018-01-27  to expire 2019-01-01.

See bug 659806  for future key rotation checks.
Comment 2 Brian Dolbec (RETIRED) gentoo-dev 2018-07-02 03:22:53 UTC 
and the gentoo-keys keyring has just been updated and in the tree.