Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 692038 - Authority Keys are broken via gnupg upgrade
Summary: Authority Keys are broken via gnupg upgrade
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Infrastructure
Classification: Unclassified
Component: Other (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Infrastructure
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-08-13 05:14 UTC by Michał Górny
Modified: 2022-06-16 03:12 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-08-13 05:14:04 UTC
The whole protection against key poisoning thing broke our Authority Key workflow:

1. The authkey signatures are not uploaded to our keyserver for some reason, and I can't figure out if it's client's or server's fault.

2. We need to disable self-sigs-only wherever we use keyserver directly.
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-08-13 05:40:58 UTC
Ok, I failed at reading the dump.  So unless I am wrong, server got it right, so we probably just need to fix the distribution infrastructure.
Comment 2 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-08-13 06:42:03 UTC
Ok, key bundles should be fixed now.
Comment 3 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-06-16 03:12:09 UTC
All seems good now?