Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 692038

Summary: Authority Keys are broken via gnupg upgrade
Product: Gentoo Infrastructure Reporter: Michał Górny <mgorny>
Component: OtherAssignee: Gentoo Infrastructure <infra-bugs>
Status: RESOLVED FIXED    
Severity: normal    
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-08-13 05:14:04 UTC
The whole protection against key poisoning thing broke our Authority Key workflow:

1. The authkey signatures are not uploaded to our keyserver for some reason, and I can't figure out if it's client's or server's fault.

2. We need to disable self-sigs-only wherever we use keyserver directly.
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-08-13 05:40:58 UTC
Ok, I failed at reading the dump.  So unless I am wrong, server got it right, so we probably just need to fix the distribution infrastructure.
Comment 2 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-08-13 06:42:03 UTC
Ok, key bundles should be fixed now.
Comment 3 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-06-16 03:12:09 UTC
All seems good now?