Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 674270 - TODO: download→signatures: get key info from gpg instead of hardcoding it
Summary: TODO: download→signatures: get key info from gpg instead of hardcoding it
Status: CONFIRMED
Alias: None
Product: Websites
Classification: Unclassified
Component: Gentoo Website (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Website Team
URL:
Whiteboard:
Keywords:
: 674746 (view as bug list)
Depends on:
Blocks:
 
Reported: 2019-01-01 16:48 UTC by Michał Górny
Modified: 2024-02-02 07:23 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-01-01 16:48:04 UTC
Right now, the website hardcodes the whole table with Infra key information.  I think it'd be better to make the script get at least some of the key data (e.g. fingerprints, expiration dates) out of the keys themselves.
Comment 1 Alec Warner (RETIRED) archtester gentoo-dev Security 2019-01-07 02:45:08 UTC
*** Bug 674746 has been marked as a duplicate of this bug. ***
Comment 2 Pyro MX 2023-07-09 23:41:43 UTC
Friendly reminder, some of the release media signatures on the Web site are currently out of date (that or the keys themselves are expired): https://www.gentoo.org/downloads/signatures/
Comment 3 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2023-07-10 01:43:42 UTC
Fixed, thanks!