You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Michael Semb Wever (Jira)" <ji...@apache.org> on 2020/01/30 16:51:00 UTC
[jira] [Comment Edited] (CASSANDRA-15534) add mick's second (RSA)
gpg key to the project's KEYS file
[ https://issues.apache.org/jira/browse/CASSANDRA-15534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17026769#comment-17026769 ]
Michael Semb Wever edited comment on CASSANDRA-15534 at 1/30/20 4:50 PM:
-------------------------------------------------------------------------
Yes you are correct [~mshuler].
My understanding was that an old DSA key of length 3072 was ok (for now). But the rpm signing has made it clearly evident that DSA should just be avoided.
Given my DSA key has never been used, the patch is updated (and i'll redo the stage release artifacts).
was (Author: michaelsembwever):
Yes you are correct [~mshuler].
My understanding was that an old DSA key of length 3072 was ok (for now). But the rpm signing has made it clearly evident that DSA should just be avoided.
Given my DSA key has never been used, the patch is updated (and redo the stage release artifacts).
> add mick's second (RSA) gpg key to the project's KEYS file
> ----------------------------------------------------------
>
> Key: CASSANDRA-15534
> URL: https://issues.apache.org/jira/browse/CASSANDRA-15534
> Project: Cassandra
> Issue Type: Task
> Components: Build
> Reporter: Michael Semb Wever
> Assignee: Michael Shuler
> Priority: Normal
> Fix For: 4.0
>
> Attachments: 15534.patch
>
>
> Following on from CASSANDRA-15360...
> The signing RPMs with `rpmsign` during the release process requires a RSA key. So my existing DSA key from 15360 does not work with `rpmsign`
> The patch adds my gpg public key to the project's KEYS file found at https://dist.apache.org/repos/dist/release/cassandra/KEYS
> My gpg public key here has the fingerprint
> A4C4 65FE A0C5 5256 1A39 2A61 E913 35D7 7E3E 87CB
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org