You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geronimo.apache.org by Donald Woods <dw...@apache.org> on 2010/01/21 15:16:23 UTC
Re: svn commit: r901700 - /geronimo/KEYS
Delos, you need to create a new PGP key that's 4096 bits, instead of the
default 1024. Here is some info from a previous posting -
Everyone who uploads artifacts (snapshot or release), don't forget that
you need to:
1) update your existing PGP keys to avoid using SHA-1
http://www.apache.org/dev/openpgp.html#sha1
2) create a new 4096 bit key for future code signing
http://www.apache.org/dev/key-transition.html
3) update/add your key into the KEYS file in svn -
geronimo/KEYS
4) upload the updated KEYS file to our distro directory -
/www/www.apache.org/dist/geronimo/
-Donald
On 1/21/10 8:38 AM, delos@apache.org wrote:
> Author: delos
> Date: Thu Jan 21 13:38:06 2010
> New Revision: 901700
>
> URL: http://svn.apache.org/viewvc?rev=901700&view=rev
> Log:
> append public key of delos
>
> Modified:
> geronimo/KEYS
>
> Modified: geronimo/KEYS
> URL: http://svn.apache.org/viewvc/geronimo/KEYS?rev=901700&r1=901699&r2=901700&view=diff
> ==============================================================================
> --- geronimo/KEYS (original)
> +++ geronimo/KEYS Thu Jan 21 13:38:06 2010
> @@ -1008,3 +1008,40 @@
> WiPNXzqCfvuELA6IUAcu
> =N6IO
> -----END PGP PUBLIC KEY BLOCK-----
> +
> +pub 1024D/3D50A4B2 2010-01-21
> +uid delos <de...@apache.org>
> +sig 3 3D50A4B2 2010-01-21 delos <de...@apache.org>
> +sub 2048g/10EAF5DA 2010-01-21
> +sig 3D50A4B2 2010-01-21 delos <de...@apache.org>
> +
> +-----BEGIN PGP PUBLIC KEY BLOCK-----
> +Version: GnuPG v1.4.9 (GNU/Linux)
> +
> +mQGiBEtYHlQRBACsODzmCQRbMlLclxstXLcVfdW9ikMfR5fsAX0gNsEjmcXKX/kz
> +vljH76DuykeLK2DzeTYj3syL+R0yLEFrXuTF+aVbPH11eXTP1rWWL14NguxZmIfn
> +Tzzr+v/ndqzLLBkyNWnT/z8t83pHlBDUo/kvfVppKgDHyQ1EKIpdoglWkwCg8Hx8
> +wk7PuBcW5QDnQCpIms0DR2UEAIafAVdS0uLj+G9DOqbUAV6Tnf3cvur873+cjb4M
> +aPUB4CXnF9rwbRWc/jNAZw7yu6KwLMR7lXuy0yB3bJYLzGfh0vFUVS2XlPDMbDYw
> +2WRxIQHLtQTD/w1YaL5vxu+FKwzaAp7/Ixt2K2HyjDJdtNxsEOWUqkdRXjGNOSxe
> +IiuUA/9M0Qz1p7/OQJ48AjPI3+KnQyFAewGhjQk2sOtEAB1TuvIAgY2N08f7sLh4
> +SvSw/yZUWKMQA6HGHjmY1+mpOplY+AZVLmsp8gOZss9CJ/jwPsx9D7Kmt7hoGXaq
> +zsyk+pSi/bb31DZX2s2LoYKbh1bXjiFxPas5FQNZmrElkXzh3bQYZGVsb3MgPGRl
> +bG9zQGFwYWNoZS5vcmc+iGAEExECACAFAktYHlQCGwMGCwkIBwMCBBUCCAMEFgID
> +AQIeAQIXgAAKCRBaZfiFPVCksqklAJ9F7lcqF5mvpPndTYghVs+bYDs3gACeKoeQ
> +v2CVmxrivz8O5lsZkSfnO4y5Ag0ES1geWBAIAMLJxGyagLqsSpPARKl8gL6V6wDX
> +3O0VhwaUPd7hoihuAxQlGr4byUXeQObcq6P4K3rPWhQJgEjBFUjdds/zBvV8lr9q
> +etxqitXHXVs80tTSzhdVs809ofaR89CuEhubBUpqR1ExOglPuP7FGJRaIrQhxMPm
> +whHs7v33EbjOViHBBnVNI04k48SAwXSuVzevcAZWNo0U9smnUjFpS57JY0N8AAWN
> +G5yiABRhwgvovfuShIolI07KOLm59WiXvreAhRj85v3k8GL5z1SJyDromZuiiKao
> +hCeiWvzdX0fH1snlsQtFtfF7oK8X0oM0KvTNkgjsCGS4JEseMfElFTCO0OsAAwUH
> +/RhTsYbf5IvmRcfEDRfDATqADgYqheSS7KDhf2gmEBLZkaPtedxYUNaocOyjAQxM
> +5Ar//4VAeTE1IfPeNe70CYRY9kyHLnNcxyZm1Biuh56xNEJfbYL/Y1mumQHMpW2v
> +Cyq5GfwdUhMUJFNrQVZ0HsGtOPTObYghOxy1kKNGsyendra+AARWf8YzrP+yEgc1
> +Wm878oalf4J2Gt0Jv+QEKDNBHUWh1dTbG+UyAnJxcoL+9QQ7+lKJt2oRpBgCRPC0
> +zxeVc1A6+avz7/XnF8GQtfCzu4zXhi7kp+WnJOLu3BCOAXjALOLEt7v9WGRBvOtp
> +EBLfkZCg1JTzRPMKAJM5CiqISQQYEQIACQUCS1geWAIbDAAKCRBaZfiFPVCkslgG
> +AKDCE2bxV2FScEFsq+Bq+jCz1pzggACggovY/jhbCvj+NIlOXXMAANsqbdo=
> +=WjOT
> +-----END PGP PUBLIC KEY BLOCK-----
> +
>
>
>
Re: svn commit: r901700 - /geronimo/KEYS
Posted by Delos <da...@gmail.com>.
OK, thanks Donald. I will re-create the new key.
2010/1/21 Donald Woods <dw...@apache.org>
> Delos, you need to create a new PGP key that's 4096 bits, instead of the
> default 1024. Here is some info from a previous posting -
>
> Everyone who uploads artifacts (snapshot or release), don't forget that
> you need to:
> 1) update your existing PGP keys to avoid using SHA-1
> http://www.apache.org/dev/openpgp.html#sha1
> 2) create a new 4096 bit key for future code signing
> http://www.apache.org/dev/key-transition.html
> 3) update/add your key into the KEYS file in svn -
> geronimo/KEYS
> 4) upload the updated KEYS file to our distro directory -
> /www/www.apache.org/dist/geronimo/
>
>
> -Donald
>
>
> On 1/21/10 8:38 AM, delos@apache.org wrote:
> > Author: delos
> > Date: Thu Jan 21 13:38:06 2010
> > New Revision: 901700
> >
> > URL: http://svn.apache.org/viewvc?rev=901700&view=rev
> > Log:
> > append public key of delos
> >
> > Modified:
> > geronimo/KEYS
> >
> > Modified: geronimo/KEYS
> > URL:
> http://svn.apache.org/viewvc/geronimo/KEYS?rev=901700&r1=901699&r2=901700&view=diff
> >
> ==============================================================================
> > --- geronimo/KEYS (original)
> > +++ geronimo/KEYS Thu Jan 21 13:38:06 2010
> > @@ -1008,3 +1008,40 @@
> > WiPNXzqCfvuELA6IUAcu
> > =N6IO
> > -----END PGP PUBLIC KEY BLOCK-----
> > +
> > +pub 1024D/3D50A4B2 2010-01-21
> > +uid delos <de...@apache.org>
> > +sig 3 3D50A4B2 2010-01-21 delos <de...@apache.org>
> > +sub 2048g/10EAF5DA 2010-01-21
> > +sig 3D50A4B2 2010-01-21 delos <de...@apache.org>
> > +
> > +-----BEGIN PGP PUBLIC KEY BLOCK-----
> > +Version: GnuPG v1.4.9 (GNU/Linux)
> > +
> > +mQGiBEtYHlQRBACsODzmCQRbMlLclxstXLcVfdW9ikMfR5fsAX0gNsEjmcXKX/kz
> > +vljH76DuykeLK2DzeTYj3syL+R0yLEFrXuTF+aVbPH11eXTP1rWWL14NguxZmIfn
> > +Tzzr+v/ndqzLLBkyNWnT/z8t83pHlBDUo/kvfVppKgDHyQ1EKIpdoglWkwCg8Hx8
> > +wk7PuBcW5QDnQCpIms0DR2UEAIafAVdS0uLj+G9DOqbUAV6Tnf3cvur873+cjb4M
> > +aPUB4CXnF9rwbRWc/jNAZw7yu6KwLMR7lXuy0yB3bJYLzGfh0vFUVS2XlPDMbDYw
> > +2WRxIQHLtQTD/w1YaL5vxu+FKwzaAp7/Ixt2K2HyjDJdtNxsEOWUqkdRXjGNOSxe
> > +IiuUA/9M0Qz1p7/OQJ48AjPI3+KnQyFAewGhjQk2sOtEAB1TuvIAgY2N08f7sLh4
> > +SvSw/yZUWKMQA6HGHjmY1+mpOplY+AZVLmsp8gOZss9CJ/jwPsx9D7Kmt7hoGXaq
> > +zsyk+pSi/bb31DZX2s2LoYKbh1bXjiFxPas5FQNZmrElkXzh3bQYZGVsb3MgPGRl
> > +bG9zQGFwYWNoZS5vcmc+iGAEExECACAFAktYHlQCGwMGCwkIBwMCBBUCCAMEFgID
> > +AQIeAQIXgAAKCRBaZfiFPVCksqklAJ9F7lcqF5mvpPndTYghVs+bYDs3gACeKoeQ
> > +v2CVmxrivz8O5lsZkSfnO4y5Ag0ES1geWBAIAMLJxGyagLqsSpPARKl8gL6V6wDX
> > +3O0VhwaUPd7hoihuAxQlGr4byUXeQObcq6P4K3rPWhQJgEjBFUjdds/zBvV8lr9q
> > +etxqitXHXVs80tTSzhdVs809ofaR89CuEhubBUpqR1ExOglPuP7FGJRaIrQhxMPm
> > +whHs7v33EbjOViHBBnVNI04k48SAwXSuVzevcAZWNo0U9smnUjFpS57JY0N8AAWN
> > +G5yiABRhwgvovfuShIolI07KOLm59WiXvreAhRj85v3k8GL5z1SJyDromZuiiKao
> > +hCeiWvzdX0fH1snlsQtFtfF7oK8X0oM0KvTNkgjsCGS4JEseMfElFTCO0OsAAwUH
> > +/RhTsYbf5IvmRcfEDRfDATqADgYqheSS7KDhf2gmEBLZkaPtedxYUNaocOyjAQxM
> > +5Ar//4VAeTE1IfPeNe70CYRY9kyHLnNcxyZm1Biuh56xNEJfbYL/Y1mumQHMpW2v
> > +Cyq5GfwdUhMUJFNrQVZ0HsGtOPTObYghOxy1kKNGsyendra+AARWf8YzrP+yEgc1
> > +Wm878oalf4J2Gt0Jv+QEKDNBHUWh1dTbG+UyAnJxcoL+9QQ7+lKJt2oRpBgCRPC0
> > +zxeVc1A6+avz7/XnF8GQtfCzu4zXhi7kp+WnJOLu3BCOAXjALOLEt7v9WGRBvOtp
> > +EBLfkZCg1JTzRPMKAJM5CiqISQQYEQIACQUCS1geWAIbDAAKCRBaZfiFPVCkslgG
> > +AKDCE2bxV2FScEFsq+Bq+jCz1pzggACggovY/jhbCvj+NIlOXXMAANsqbdo=
> > +=WjOT
> > +-----END PGP PUBLIC KEY BLOCK-----
> > +
> >
> >
> >
>
--
Best Regards,
Delos