texlive[50377] gpg key extension

commits+karl at tug.org commits+karl at tug.org
Wed Mar 13 22:51:00 CET 2019


Revision: 50377
          http://tug.org/svn/texlive?view=revision&revision=50377
Author:   karl
Date:     2019-03-13 22:51:00 +0100 (Wed, 13 Mar 2019)
Log Message:
-----------
gpg key extension

Modified Paths:
--------------
    trunk/Master/tlpkg/doc/releng.txt
    trunk/Master/tlpkg/gpg/tl-key-extension.txt

Removed Paths:
-------------
    trunk/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt

Property Changed:
----------------
    trunk/Master/tlpkg/gpg/tl-key-extension.txt

Deleted: trunk/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt
===================================================================
--- trunk/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt	2019-03-13 21:07:08 UTC (rev 50376)
+++ trunk/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt	2019-03-13 21:51:00 UTC (rev 50377)
@@ -1,34 +0,0 @@
-$Id$
-Public domain.
-
-
-Steps to extend TL signing key
-==============================
-This needs to happen every year in August (--list-keys for actual expiration).
-
-* get main key dir from USB stick
-
-* set GNUPGHOME to the respective directory
-
-* gpg1 --edit-key 0x0D5E5D9106BAB6BC
-	key 2		# select signing sub key
-	expire
-	1y
-	save
-
-* export signing key
-	gpg1 --export 0x0D5E5D9106BAB6BC > tmpkey
-
-* send to key server
-	gpg1 --keyserver hkp://pool.sks-keyservers.net \
-	  --send-key 0x0D5E5D9106BAB6BC
-
-* import into TL subversion
-	gpg1 --homedir .../Master/tlpkg/gpg --import tmpkey
-
-* on the TL side
-	gpg --homedir ~texlive/etc \
-	  --keyserver hkp://pool.sks-keyservers.net \
-	  --recv-key 0x0D5E5D9106BAB6BC
-
-* after testing push out tlcritical

Modified: trunk/Master/tlpkg/doc/releng.txt
===================================================================
--- trunk/Master/tlpkg/doc/releng.txt	2019-03-13 21:07:08 UTC (rev 50376)
+++ trunk/Master/tlpkg/doc/releng.txt	2019-03-13 21:51:00 UTC (rev 50377)
@@ -135,6 +135,7 @@
 10. After first rebuild success, undo --recreate. Life goes on.
 
 A. At some point, after tlnet freeze:
+  Update gpg expiration, see tlpkg/gpg/tl-key-extension.txt.
   Run tl-update-linked-scripts to ensure consistency.
   In Master/tlpkg, update bundled Windows programs as needed:
     dviout texworks tlgs tlperl tlpsv

Modified: trunk/Master/tlpkg/gpg/tl-key-extension.txt
===================================================================
--- trunk/Master/tlpkg/gpg/tl-key-extension.txt	2019-03-13 21:07:08 UTC (rev 50376)
+++ trunk/Master/tlpkg/gpg/tl-key-extension.txt	2019-03-13 21:51:00 UTC (rev 50377)
@@ -1,6 +1,10 @@
+$Id$
+
 How to update TeX Live distribution signing key
 ===============================================
 
+this should be done every year during the pretest.
+
 shut down networking service
 
 cp gpg directory from USB stick to computer
@@ -12,6 +16,7 @@
 > key 2
 	# selects the expiring key, check!
 > expire
+> 1y
 	# choose something after the release of the next TL
 > save
 


Property changes on: trunk/Master/tlpkg/gpg/tl-key-extension.txt
___________________________________________________________________
Added: svn:keywords
## -0,0 +1 ##
+Date Author Id Revision
\ No newline at end of property


More information about the tex-live-commits mailing list