674270 – TODO: download→signatures: get key info from gpg instead of hardcoding it

Bug 674270 - TODO: download→signatures: get key info from gpg instead of hardcoding it

Summary: TODO: download→signatures: get key info from gpg instead of hardcoding it

Status:	CONFIRMED

Alias:	None

Product:	Websites
Classification:	Unclassified
Component:	Gentoo Website (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Gentoo Website Team

URL:
Whiteboard:
Keywords:

Duplicates (1):	674746 (view as bug list)
Depends on:
Blocks:

Reported:	2019-01-01 16:48 UTC by Michał Górny
Modified:	2024-02-02 07:23 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Michał Górny archtester

2019-01-01 16:48:04 UTC

Right now, the website hardcodes the whole table with Infra key information.  I think it'd be better to make the script get at least some of the key data (e.g. fingerprints, expiration dates) out of the keys themselves.

Comment 1 Alec Warner (RETIRED) archtester

2019-01-07 02:45:08 UTC

*** Bug 674746 has been marked as a duplicate of this bug. ***

Comment 2 Pyro MX 2023-07-09 23:41:43 UTC

Friendly reminder, some of the release media signatures on the Web site are currently out of date (that or the keys themselves are expired): https://www.gentoo.org/downloads/signatures/

Comment 3 Michał Górny archtester

2023-07-10 01:43:42 UTC

Fixed, thanks!