Bug 413197

Summary:	cardoe's revoked gpg key on active dev list
Product:	Community Relations	Reporter:	Outer Measure <outermeasure>
Component:	Developer Relations	Assignee:	Gentoo Community Relations Team <comrel>
Status:	RESOLVED FIXED
Severity:	normal	CC:	cardoe
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Outer Measure 2012-04-23 06:07:49 UTC

In http://www.gentoo.org/proj/en/devrel/roll-call/userinfo.xml cardoe's gpg key is listed as 0x179106D0, but that key is revoked:

$ gpg --edit-key 0x179106D0 q
gpg (GnuPG) 2.0.19; Copyright (C) 2012 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.


The following key was revoked on 2003-12-29 by DSA key 161CFF5C179106D0 Douglas Goldstein <cardoe@gentoo.org>
pub  1024D/161CFF5C179106D0  created: 2003-12-25  revoked: 2003-12-29  usage: SC  
                             trust: unknown       validity: revoked
The following key was revoked on 2003-12-29 by DSA key 161CFF5C179106D0 Douglas Goldstein <cardoe@gentoo.org>
sub  2048g/8D02282AFCC3CB44  created: 2003-12-25  revoked: 2003-12-29  usage: E   
[ revoked] (1). Douglas Goldstein <cardoe@gentoo.org>
[ revoked] (2)  Douglas Goldstein <dougg@ufl.edu>
[ revoked] (3)  Douglas Goldstein <cardoe@cardoe.com>

According to a search on keys.gnupg.net, apparently the new key is either 0x06dbeeb18b4264cb (2005-05-06) or 0xe7ea5d078201af45 (2005-01-19), probably the former since the latter only has a 1024D master key with no subkeys.

Comment 1 Doug Goldstein (RETIRED) gentoo-dev

2012-04-23 14:43:13 UTC

Thanks for noticing that. Let me figure out which is valid and figure out how to update the site.

Comment 2 Markos Chandras (RETIRED) gentoo-dev

2012-08-15 21:44:17 UTC

ping?

Comment 3 SpanKY gentoo-dev

2012-09-07 20:03:32 UTC

i think that's all managed in ldap isn't it ?

Comment 4 Torsten Veller (RETIRED) gentoo-dev

2012-09-07 20:23:54 UTC

Yes, userinfo.xml is created from ldap info.

How to change the gpg key:
http://www.gentoo.org/proj/en/infrastructure/ldap.xml#doc_chap3_pre3

Comment 5 Doug Goldstein (RETIRED) gentoo-dev

2013-02-24 22:04:49 UTC

Alright. LDAP is updated so that should fix it.