From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org)
	by finch.gentoo.org with esmtp (Exim 4.60)
	(envelope-from <gentoo-dev+bounces-45696-garchives=archives.gentoo.org@lists.gentoo.org>)
	id 1QJraf-0001bx-NZ
	for garchives@archives.gentoo.org; Tue, 10 May 2011 18:23:25 +0000
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id 1876F1C00D;
	Tue, 10 May 2011 18:23:13 +0000 (UTC)
Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183])
	by pigeon.gentoo.org (Postfix) with ESMTP id B62EC1C036
	for <gentoo-dev@lists.gentoo.org>; Tue, 10 May 2011 18:22:36 +0000 (UTC)
Received: by smtp.gentoo.org (Postfix, from userid 2135)
	id 25A4E2AC005; Tue, 10 May 2011 18:22:35 +0000 (UTC)
Date: Tue, 10 May 2011 14:22:32 -0400
From: Jim Ramsay <lack@gentoo.org>
To: gentoo-dev@lists.gentoo.org
Subject: Re: [gentoo-dev] Re: rejecting unsigned commits
Message-ID: <20110510182232.GB5109@altair>
References: <AANLkTi=4o69ytUxAVpy-O31AWQv-5p4bEWD2466NWYGx@mail.gmail.com>
 <AANLkTimmECB=UhzsdADS4C7J+JvYBnYCTB+zxty3mr+X@mail.gmail.com>
 <20110510020849.GA5109@altair>
 <4DC8D8EF.9040602@gentoo.org>
Precedence: bulk
List-Post: <mailto:gentoo-dev@lists.gentoo.org>
List-Help: <mailto:gentoo-dev+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-dev+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-dev+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-dev.gentoo.org>
X-BeenThere: gentoo-dev@lists.gentoo.org
Reply-to: gentoo-dev@lists.gentoo.org
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: <4DC8D8EF.9040602@gentoo.org>
User-Agent: Mutt/1.5.21 (2010-09-15)
Content-Transfer-Encoding: quoted-printable
X-Archives-Salt: 
X-Archives-Hash: b10234e2bd6188a5af32ff81447ac203

On Tue, May 10, 2011 at 08:19:27AM +0200, "Pawe=C5=82 Hajdan, Jr." wrote:
> On 5/10/11 4:08 AM, Jim Ramsay wrote:
> > - Does this tree signing key have to be DSA?  Or is RSA okay too?
>=20
> No idea, I'd probably just try and see if signing works.

/me plugs his ears and presses "GO"...

Looks like it works fine!

> > - If I have a key already, should I generate a new subkey just
> >   for manifest signing, make a whole new primary key, or just use
> >   the same key I use to sign my emails?
>=20
> See
> <http://archives.gentoo.org/gentoo-dev/msg_bdc24ba33036ef413e620dc94532=
e080.xml>,
> I think no separate key should be needed.

You know, I even remember reading this email, but focused more on
the SSL Cert recommendation part than immediate answer.  Thanks :)

--=20
Jim Ramsay