Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 386477 - Handbook should reference both automated and manual GPG keys
Summary: Handbook should reference both automated and manual GPG keys
Status: RESOLVED FIXED
Alias: None
Product: [OLD] Docs on www.gentoo.org
Classification: Unclassified
Component: Installation Handbook (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Sven Vermeulen (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-10-08 23:59 UTC by Robin Johnson
Modified: 2011-10-09 09:49 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2011-10-08 23:59:51 UTC
As per:
http://www.gentoo.org/proj/en/releng/#doc_chap5

Releng has two signing keys. One is used for automated builds, and the other one is used manual builds.

The handbook only references one key presently.
Comment 1 nm (RETIRED) gentoo-dev 2011-10-09 00:41:45 UTC
How do we know which is used for what builds? AFAIK releng just pushes out autobuilds, so any other signing keys are superfluous.
Comment 2 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2011-10-09 05:18:43 UTC
You have to try to verify the signature (or use GPG at least) to get what the signing key was. That's why I think both keys should be listed on the page.
Comment 3 Sven Vermeulen (RETIRED) gentoo-dev 2011-10-09 09:49:48 UTC
Added the second key to the --recv-keys command. Thanks for reporting!