Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 413197 - cardoe's revoked gpg key on active dev list
Summary: cardoe's revoked gpg key on active dev list
Status: RESOLVED FIXED
Alias: None
Product: Community Relations
Classification: Unclassified
Component: Developer Relations (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Community Relations Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-04-23 06:07 UTC by Outer Measure
Modified: 2013-02-24 22:04 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Outer Measure 2012-04-23 06:07:49 UTC
In http://www.gentoo.org/proj/en/devrel/roll-call/userinfo.xml cardoe's gpg key is listed as 0x179106D0, but that key is revoked:

$ gpg --edit-key 0x179106D0 q
gpg (GnuPG) 2.0.19; Copyright (C) 2012 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.


The following key was revoked on 2003-12-29 by DSA key 161CFF5C179106D0 Douglas Goldstein <cardoe@gentoo.org>
pub  1024D/161CFF5C179106D0  created: 2003-12-25  revoked: 2003-12-29  usage: SC  
                             trust: unknown       validity: revoked
The following key was revoked on 2003-12-29 by DSA key 161CFF5C179106D0 Douglas Goldstein <cardoe@gentoo.org>
sub  2048g/8D02282AFCC3CB44  created: 2003-12-25  revoked: 2003-12-29  usage: E   
[ revoked] (1). Douglas Goldstein <cardoe@gentoo.org>
[ revoked] (2)  Douglas Goldstein <dougg@ufl.edu>
[ revoked] (3)  Douglas Goldstein <cardoe@cardoe.com>

According to a search on keys.gnupg.net, apparently the new key is either 0x06dbeeb18b4264cb (2005-05-06) or 0xe7ea5d078201af45 (2005-01-19), probably the former since the latter only has a 1024D master key with no subkeys.
Comment 1 Doug Goldstein (RETIRED) gentoo-dev 2012-04-23 14:43:13 UTC
Thanks for noticing that. Let me figure out which is valid and figure out how to update the site.
Comment 2 Markos Chandras (RETIRED) gentoo-dev 2012-08-15 21:44:17 UTC
ping?
Comment 3 SpanKY gentoo-dev 2012-09-07 20:03:32 UTC
i think that's all managed in ldap isn't it ?
Comment 4 Torsten Veller (RETIRED) gentoo-dev 2012-09-07 20:23:54 UTC
Yes, userinfo.xml is created from ldap info.

How to change the gpg key:
http://www.gentoo.org/proj/en/infrastructure/ldap.xml#doc_chap3_pre3
Comment 5 Doug Goldstein (RETIRED) gentoo-dev 2013-02-24 22:04:49 UTC
Alright. LDAP is updated so that should fix it.