Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
List of official Gentoo GPG signatures?
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Gentoo Chat
View previous topic :: View next topic  
Author Message
StaffanP
n00b
n00b


Joined: 01 Oct 2002
Posts: 22
Location: Sweden

PostPosted: Sun May 18, 2014 4:01 am    Post subject: List of official Gentoo GPG signatures? Reply with quote

Is there a published list somewhere of the official GPG signatures that Gentoo uses? I can't seem to find any, I've been googling like crazy.

The Gentoo devs are signing their correspondence (GLSA:s) which is nice but what good is that if I can't verify that the key really is an official one?
Back to top
View user's profile Send private message
fturco
Apprentice
Apprentice


Joined: 08 Dec 2010
Posts: 290
Location: Italy

PostPosted: Sun May 18, 2014 12:41 pm    Post subject: Reply with quote

I found this, but I'm not sure it's what you need.
Back to top
View user's profile Send private message
StaffanP
n00b
n00b


Joined: 01 Oct 2002
Posts: 22
Location: Sweden

PostPosted: Sun May 18, 2014 5:23 pm    Post subject: Reply with quote

fturco wrote:
I found this, but I'm not sure it's what you need.


Thanks, that's a start at least but I was thinking primarily of the GLSA emails, they are signed by the Gentoo devs but it's hard to find an alternative source to compare the fingerprints with.

In the end I managed to find this list but it's not exactly optimal.
Back to top
View user's profile Send private message
toralf
Advocate
Advocate


Joined: 01 Feb 2004
Posts: 2745
Location: Hamburg/Germany

PostPosted: Sun May 18, 2014 6:09 pm    Post subject: Reply with quote

fturco wrote:
I found this, but I'm not sure it's what you need.
It is interesting, that the first key from that page can't be fetched, whilst another works :
Code:
$ gpg --keyserver subkeys.pgp.net --recv-keys 0xDB6B8C1F96D8BF6D
gpg: enabled debug flags: memstat trust extprog assuan
gpg: requesting key 96D8BF6D from hkp server subkeys.pgp.net
gpg: DBG: execlp: /usr/libexec/gpg2keys_hkp
gpg: keyserver timed out
gpg: keyserver receive failed: Keyserver error
random usage: poolsize=600 mixed=0 polls=0/0 added=0/0
              outmix=0 getlvl1=0/0 getlvl2=0/0
secmem usage: 0/32768 bytes in 0 blocks

$ gpg --keyserver subkeys.pgp.net --recv-keys 0xBB572E0E2D182910
gpg: enabled debug flags: memstat trust extprog assuan
gpg: requesting key 2D182910 from hkp server subkeys.pgp.net
gpg: DBG: execlp: /usr/libexec/gpg2keys_hkp
gpg: key 2D182910: public key "Gentoo Linux Release Engineering (Automated Weekly Release Key) <releng@gentoo.org>" imported
gpg: 3 marginal(s) needed, 1 complete(s) needed, classic trust model
gpg: depth: 0  valid:   4  signed:   1  trust: 0-, 0q, 0n, 0m, 0f, 4u
gpg: depth: 1  valid:   1  signed:   0  trust: 0-, 0q, 0n, 1m, 0f, 0u
gpg: next trustdb check due at 2019-02-06
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)
random usage: poolsize=600 mixed=0 polls=0/0 added=0/0
              outmix=0 getlvl1=0/0 getlvl2=0/0
secmem usage: 0/32768 bytes in 0 blocks

$ gpg --keyserver subkeys.pgp.net --recv-keys 0xDB6B8C1F96D8BF6D
gpg: enabled debug flags: memstat trust extprog assuan
gpg: requesting key 96D8BF6D from hkp server subkeys.pgp.net
gpg: DBG: execlp: /usr/libexec/gpg2keys_hkp
gpg: keyserver timed out
gpg: keyserver receive failed: Keyserver error
random usage: poolsize=600 mixed=0 polls=0/0 added=0/0
              outmix=0 getlvl1=0/0 getlvl2=0/0
secmem usage: 0/32768 bytes in 0 blocks
Updateworks with keys.gnupg.net
Back to top
View user's profile Send private message
a3li
Developer
Developer


Joined: 02 Sep 2008
Posts: 110
Location: 德国

PostPosted: Mon May 19, 2014 4:21 pm    Post subject: Reply with quote

The keys are listed on the roll call: https://www.gentoo.org/proj/en/devrel/roll-call/userinfo.xml
_________________
I am Confuism. Do not bother me.
Back to top
View user's profile Send private message
StaffanP
n00b
n00b


Joined: 01 Oct 2002
Posts: 22
Location: Sweden

PostPosted: Mon May 19, 2014 11:45 pm    Post subject: Reply with quote

a3li wrote:
The keys are listed on the roll call: https://www.gentoo.org/proj/en/devrel/roll-call/userinfo.xml


Aha, excellent! That's exactly what I was looking for. Odd that I didn't find this list with Google. Thanks!
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Gentoo Chat All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum