texlive[50377] gpg key extension
commits+karl at tug.org
commits+karl at tug.org
Wed Mar 13 22:51:00 CET 2019
Revision: 50377
http://tug.org/svn/texlive?view=revision&revision=50377
Author: karl
Date: 2019-03-13 22:51:00 +0100 (Wed, 13 Mar 2019)
Log Message:
-----------
gpg key extension
Modified Paths:
--------------
trunk/Master/tlpkg/doc/releng.txt
trunk/Master/tlpkg/gpg/tl-key-extension.txt
Removed Paths:
-------------
trunk/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt
Property Changed:
----------------
trunk/Master/tlpkg/gpg/tl-key-extension.txt
Deleted: trunk/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt
===================================================================
--- trunk/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt 2019-03-13 21:07:08 UTC (rev 50376)
+++ trunk/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt 2019-03-13 21:51:00 UTC (rev 50377)
@@ -1,34 +0,0 @@
-$Id$
-Public domain.
-
-
-Steps to extend TL signing key
-==============================
-This needs to happen every year in August (--list-keys for actual expiration).
-
-* get main key dir from USB stick
-
-* set GNUPGHOME to the respective directory
-
-* gpg1 --edit-key 0x0D5E5D9106BAB6BC
- key 2 # select signing sub key
- expire
- 1y
- save
-
-* export signing key
- gpg1 --export 0x0D5E5D9106BAB6BC > tmpkey
-
-* send to key server
- gpg1 --keyserver hkp://pool.sks-keyservers.net \
- --send-key 0x0D5E5D9106BAB6BC
-
-* import into TL subversion
- gpg1 --homedir .../Master/tlpkg/gpg --import tmpkey
-
-* on the TL side
- gpg --homedir ~texlive/etc \
- --keyserver hkp://pool.sks-keyservers.net \
- --recv-key 0x0D5E5D9106BAB6BC
-
-* after testing push out tlcritical
Modified: trunk/Master/tlpkg/doc/releng.txt
===================================================================
--- trunk/Master/tlpkg/doc/releng.txt 2019-03-13 21:07:08 UTC (rev 50376)
+++ trunk/Master/tlpkg/doc/releng.txt 2019-03-13 21:51:00 UTC (rev 50377)
@@ -135,6 +135,7 @@
10. After first rebuild success, undo --recreate. Life goes on.
A. At some point, after tlnet freeze:
+ Update gpg expiration, see tlpkg/gpg/tl-key-extension.txt.
Run tl-update-linked-scripts to ensure consistency.
In Master/tlpkg, update bundled Windows programs as needed:
dviout texworks tlgs tlperl tlpsv
Modified: trunk/Master/tlpkg/gpg/tl-key-extension.txt
===================================================================
--- trunk/Master/tlpkg/gpg/tl-key-extension.txt 2019-03-13 21:07:08 UTC (rev 50376)
+++ trunk/Master/tlpkg/gpg/tl-key-extension.txt 2019-03-13 21:51:00 UTC (rev 50377)
@@ -1,6 +1,10 @@
+$Id$
+
How to update TeX Live distribution signing key
===============================================
+this should be done every year during the pretest.
+
shut down networking service
cp gpg directory from USB stick to computer
@@ -12,6 +16,7 @@
> key 2
# selects the expiring key, check!
> expire
+> 1y
# choose something after the release of the next TL
> save
Property changes on: trunk/Master/tlpkg/gpg/tl-key-extension.txt
___________________________________________________________________
Added: svn:keywords
## -0,0 +1 ##
+Date Author Id Revision
\ No newline at end of property
More information about the tex-live-commits
mailing list