rpms/git
6
0
Fork 0
Code Issues Pull Requests Releases Activity
Fast Version Control System
389 Commits 8 Branches 43 Tags 1.2 MiB
Shell 100%
7c95c76e49
Go to file
Todd Zullinger 7c95c76e49 Update Junio's GPG key 
The expiration of the signing subkey was recently extended.  Ensure
we're using a current copy of the key to avoid any output from gpg
stating that the key is expired.

While our current usage of gpgv2 is not affected by the expired signing
subkey, anyone importing the key and using 'gpg2 --verify' would see
'Note: This key has expired!' in the output.

For reference, here is the process used to update the key:

    (cd ~/src/git && git cat-file blob junio-gpg-pub | gpg2 --import)
    fpr='96E07AF25771955980DAD10020D04E5A713660A7'
    gpg2 --keyserver hkp://keys.gnupg.net --refresh-keys $fpr
    gpg2 --export-options export-minimal --no-emit-version --armor \
         --export $fpr > gpgkey-junio.asc

Here is the ouput from gpg2 --list-sigs¹ before:

    pub   rsa4096/20D04E5A713660A7 2011-10-01 [SC]
	  Key fingerprint = 96E0 7AF2 5771 9559 80DA  D100 20D0 4E5A 7136 60A7
    uid                            Junio C Hamano <gitster@pobox.com>
    sig 3        20D04E5A713660A7 2011-10-01 never       Junio C Hamano <gitster@pobox.com>
    uid                            Junio C Hamano <junio@pobox.com>
    sig 3        20D04E5A713660A7 2011-10-01 never       Junio C Hamano <gitster@pobox.com>
    uid                            Junio C Hamano <jch@google.com>
    sig 3        20D04E5A713660A7 2011-10-01 never       Junio C Hamano <gitster@pobox.com>
    sub   rsa4096/B0B5E88696AFE6CB 2011-10-03 [S] [expired: 2015-09-21]
	  Key fingerprint = E1F0 36B1 FEE7 221F C778  ECEF B0B5 E886 96AF E6CB
    sig          20D04E5A713660A7 2014-09-21 never       Junio C Hamano <gitster@pobox.com>

and after:

    pub   rsa4096/20D04E5A713660A7 2011-10-01 [SC]
	  Key fingerprint = 96E0 7AF2 5771 9559 80DA  D100 20D0 4E5A 7136 60A7
    uid                            Junio C Hamano <gitster@pobox.com>
    sig 3        20D04E5A713660A7 2011-10-01 never       Junio C Hamano <gitster@pobox.com>
    uid                            Junio C Hamano <junio@pobox.com>
    sig 3        20D04E5A713660A7 2011-10-01 never       Junio C Hamano <gitster@pobox.com>
    uid                            Junio C Hamano <jch@google.com>
    sig 3        20D04E5A713660A7 2011-10-01 never       Junio C Hamano <gitster@pobox.com>
    sub   rsa4096/B0B5E88696AFE6CB 2011-10-03 [S] [expires: 2020-07-26]
	  Key fingerprint = E1F0 36B1 FEE7 221F C778  ECEF B0B5 E886 96AF E6CB
    sig          20D04E5A713660A7 2017-07-27 never       Junio C Hamano <gitster@pobox.com>
    sub   rsa4096/86B76D5D833262C4 2011-10-01 [E]
	  Key fingerprint = 1843 AEC2 2DD5 6B75 E554  3FEF 86B7 6D5D 8332 62C4
    sig          20D04E5A713660A7 2011-10-01 never       Junio C Hamano <gitster@pobox.com>
    sub   rsa4096/7594EEC7B3F7CAC9 2014-09-20 [S] [expires: 2020-07-26]
	  Key fingerprint = DC3D 6C01 251E CA4B 1200  A7EE 7594 EEC7 B3F7 CAC9
    sig          20D04E5A713660A7 2017-07-27 never       Junio C Hamano <gitster@pobox.com>

¹ The full gpg2 command used was:
  gpg2 --no-options --keyid-format long --with-fingerprint --with-subkey-fingerprint --list-options "show-sig-expire show-sig-subpackets show-unusable-uids show-unusable-subkeys no-show-uid-validity" --list-sigs 20D04E5A713660A7
2017-09-18 13:07:51 -04:00
.gitignore Check upstream GPG signatures in %prep 2016-03-27 21:31:56 -04:00
git-1.8-gitweb-home-link.patch Update to 1.8.4.2 (#1024497) 2013-10-29 17:03:02 -04:00
git-cvsimport-Ignore-cvsps-2.2b1-Branches-output.patch Update to git-1.6.2.2 2009-04-04 20:47:17 +00:00
git-gui.desktop Update to git-1.6.3.2 2009-06-06 01:45:16 +00:00
git-init.el Add git-status and git-blame autoloads for emacs 2007-06-26 11:27:51 +00:00
git.conf.httpd - Install git-* commands in %{_libexecdir}/git-core, the upstream default 2009-01-03 16:36:21 +00:00
git.socket use systemd instead of xinetd (bz 737183) 2013-04-30 14:25:37 -04:00
git.spec Rebuild for rpm-4.14 bug (#1480407) 2017-08-10 21:24:54 -04:00
git.xinetd.in Update to git-1.6.6.1 2010-01-31 21:05:27 +00:00
git@.service Rename git.service into git@.service and bump release 2014-10-24 17:51:58 +02:00
gitweb.conf.in Update to git-1.6.6.1 2010-01-31 21:05:27 +00:00
gpgkey-junio.asc Update Junio's GPG key 2017-09-18 13:07:51 -04:00
sources Update to 2.14.1 (resolves CVE-2017-1000117) 2017-08-10 17:40:10 -04:00