| View previous topic :: View next topic |
| Author |
Message |
StaffanP
n00b
Joined: 01 Oct 2002
Posts: 35
Location: Sweden
|
 Posted: Sun May 18, 2014 4:01 am Post subject: List of official Gentoo GPG signatures? |
 |
|
Is there a published list somewhere of the official GPG signatures that Gentoo uses? I can't seem to find any, I've been googling like crazy.
The Gentoo devs are signing their correspondence (GLSA:s) which is nice but what good is that if I can't verify that the key really is an official one? |
|
| Back to top |
|
 |
fturco
Veteran
Joined: 08 Dec 2010
Posts: 1181
Location: Italy
|
| Posted: Sun May 18, 2014 12:41 pm Post subject: |
|
|
| I found this, but I'm not sure it's what you need. |
|
| Back to top |
|
|
StaffanP
n00b
Joined: 01 Oct 2002
Posts: 35
Location: Sweden
|
| Posted: Sun May 18, 2014 5:23 pm Post subject: |
|
|
| fturco wrote: | | I found this, but I'm not sure it's what you need. |
Thanks, that's a start at least but I was thinking primarily of the GLSA emails, they are signed by the Gentoo devs but it's hard to find an alternative source to compare the fingerprints with.
In the end I managed to find this list but it's not exactly optimal. |
|
| Back to top |
|
|
toralf
Developer
Joined: 01 Feb 2004
Posts: 3922
Location: Hamburg
|
| Posted: Sun May 18, 2014 6:09 pm Post subject: |
|
|
| fturco wrote: | | I found this, but I'm not sure it's what you need. |
It is interesting, that the first key from that page can't be fetched, whilst another works : | Code: | $ gpg --keyserver subkeys.pgp.net --recv-keys 0xDB6B8C1F96D8BF6D
gpg: enabled debug flags: memstat trust extprog assuan
gpg: requesting key 96D8BF6D from hkp server subkeys.pgp.net
gpg: DBG: execlp: /usr/libexec/gpg2keys_hkp
gpg: keyserver timed out
gpg: keyserver receive failed: Keyserver error
random usage: poolsize=600 mixed=0 polls=0/0 added=0/0
outmix=0 getlvl1=0/0 getlvl2=0/0
secmem usage: 0/32768 bytes in 0 blocks
$ gpg --keyserver subkeys.pgp.net --recv-keys 0xBB572E0E2D182910
gpg: enabled debug flags: memstat trust extprog assuan
gpg: requesting key 2D182910 from hkp server subkeys.pgp.net
gpg: DBG: execlp: /usr/libexec/gpg2keys_hkp
gpg: key 2D182910: public key "Gentoo Linux Release Engineering (Automated Weekly Release Key) <releng@gentoo.org>" imported
gpg: 3 marginal(s) needed, 1 complete(s) needed, classic trust model
gpg: depth: 0 valid: 4 signed: 1 trust: 0-, 0q, 0n, 0m, 0f, 4u
gpg: depth: 1 valid: 1 signed: 0 trust: 0-, 0q, 0n, 1m, 0f, 0u
gpg: next trustdb check due at 2019-02-06
gpg: Total number processed: 1
gpg: imported: 1 (RSA: 1)
random usage: poolsize=600 mixed=0 polls=0/0 added=0/0
outmix=0 getlvl1=0/0 getlvl2=0/0
secmem usage: 0/32768 bytes in 0 blocks
$ gpg --keyserver subkeys.pgp.net --recv-keys 0xDB6B8C1F96D8BF6D
gpg: enabled debug flags: memstat trust extprog assuan
gpg: requesting key 96D8BF6D from hkp server subkeys.pgp.net
gpg: DBG: execlp: /usr/libexec/gpg2keys_hkp
gpg: keyserver timed out
gpg: keyserver receive failed: Keyserver error
random usage: poolsize=600 mixed=0 polls=0/0 added=0/0
outmix=0 getlvl1=0/0 getlvl2=0/0
secmem usage: 0/32768 bytes in 0 blocks
|
Updateworks with keys.gnupg.net |
|
| Back to top |
|
|
a3li
Retired Dev
Joined: 02 Sep 2008
Posts: 122
Location: 독일
|
|
| Back to top |
|
|
StaffanP
n00b
Joined: 01 Oct 2002
Posts: 35
Location: Sweden
|
| Posted: Mon May 19, 2014 11:45 pm Post subject: |
|
|
Aha, excellent! That's exactly what I was looking for. Odd that I didn't find this list with Google. Thanks! |
|
| Back to top |
|
|
|
Gentoo Chat
