From: Mike Gilbert <floppym@gentoo.org>
To: gentoo-dev@lists.gentoo.org
Cc: Mike Gilbert <floppym@gentoo.org>
Subject: [gentoo-dev] [PATCH v3] glep-0063: Add section about the Gentoo keyserver
Date: Fri, 18 Dec 2020 10:56:23 -0500 [thread overview]
Message-ID: <20201218155623.1849602-1-floppym@gentoo.org> (raw)
In-Reply-To: <20201217181216.1825482-1-floppym@gentoo.org>
Signed-off-by: Mike Gilbert <floppym@gentoo.org>
---
v3: Fixed typo.
Added link to keys.gentoo.org.
Moved SKS upload advice to Recommendations section.
Added Gentoo keyserver advice to Bare minimum requirements section.
glep-0063.rst | 32 ++++++++++++++++++++++++--------
1 file changed, 24 insertions(+), 8 deletions(-)
diff --git a/glep-0063.rst b/glep-0063.rst
index 82541bd..6997044 100644
--- a/glep-0063.rst
+++ b/glep-0063.rst
@@ -7,10 +7,10 @@ Author: Robin H. Johnson <robbat2@gentoo.org>,
Michał Górny <mgorny@gentoo.org>
Type: Standards Track
Status: Final
-Version: 2.1
+Version: 2.2
Created: 2013-02-18
-Last-Modified: 2019-11-07
-Post-History: 2013-11-10, 2018-07-03, 2018-07-21, 2019-02-24
+Last-Modified: 2020-12-17
+Post-History: 2013-11-10, 2018-07-03, 2018-07-21, 2019-02-24, 2020-12-17
Content-Type: text/x-rst
---
@@ -28,6 +28,9 @@ OpenPGP key management policies for the Gentoo Linux distribution.
Changes
=======
+v2.2
+ Added information about the Gentoo keyserver.
+
v2.1
A requirement for an encryption key has been added, in order to extend
the GLEP beyond commit signing and into use of OpenPGP for dev-to-dev
@@ -114,7 +117,7 @@ Keys that do not conform to them can not be used to commit.
6. UID using your ``@gentoo.org`` e-mail included in the key.
-7. Upload your key to the SKS keyserver rotation before usage!
+7. Keys must be uploaded to the Gentoo keyserver.
Recommendations
---------------
@@ -135,8 +138,13 @@ their primary key).
5. Encrypted backup of your secret keys.
+6. Upload to SKS or another public keyserver pool.
+
+Gentoo Infrastructure
+=====================
+
Gentoo LDAP
-===========
+-----------
All Gentoo developers must list the complete fingerprint for their primary
keys in the "``gpgfingerprint``" LDAP field. It must be exactly 40 hex digits,
@@ -147,6 +155,14 @@ of the fingerprint field. In any place that presently displays
the "``gpgkey``" field, the last 16 hex digits of the fingerprint should
be displayed instead.
+Gentoo Keyserver
+----------------
+
+Gentoo infrastructure uses a keyserver that is isolated from the SKS pool.
+This keyserver is restricted to accepting uploads from authorized Gentoo hosts.
+Instructions for uploading keys to this server may be found at
+https://keys.gentoo.org/.
+
Backwards Compatibility
=======================
@@ -212,6 +228,6 @@ Copyright
Copyright (c) 2013-2019 by Robin Hugh Johnson, Andreas K. Hüttel,
Marissa Fischer, Michał Górny.
-This work is licensed under the Creative Commons Attribution-ShareAlike 3.0
-Unported License. To view a copy of this license, visit
-https://creativecommons.org/licenses/by-sa/3.0/.
+This work is licensed under the Creative Commons Attribution-ShareAlike 4.0
+International License. To view a copy of this license, visit
+https://creativecommons.org/licenses/by-sa/4.0/.
--
2.30.0.rc0
next prev parent reply other threads:[~2020-12-18 15:56 UTC|newest]
Thread overview: 21+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-12-17 17:49 [gentoo-dev] [PATCH] glep-0063: Add section about the Gentoo keyserver Mike Gilbert
2020-12-17 17:58 ` Robin H. Johnson
2020-12-17 18:12 ` [gentoo-dev] [PATCH v2] " Mike Gilbert
2020-12-17 18:44 ` Davide Pesavento
2020-12-17 19:34 ` Mike Gilbert
2020-12-17 19:27 ` Michał Górny
2020-12-17 19:41 ` Robin H. Johnson
2020-12-17 20:03 ` Aaron W. Swenson
2020-12-17 20:15 ` Mike Gilbert
2020-12-17 20:21 ` Michał Górny
2020-12-17 21:31 ` Ulrich Mueller
2020-12-17 21:38 ` Mike Gilbert
2020-12-17 22:03 ` Ulrich Mueller
2020-12-17 22:10 ` Mike Gilbert
2020-12-18 7:45 ` Ulrich Mueller
2020-12-18 19:04 ` Mike Gilbert
2020-12-17 23:58 ` Thomas Deutschmann
2020-12-18 0:24 ` Mike Gilbert
2020-12-18 0:46 ` Thomas Deutschmann
2020-12-18 15:56 ` Mike Gilbert [this message]
2020-12-18 16:08 ` [gentoo-dev] [PATCH v3] " Michał Górny
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20201218155623.1849602-1-floppym@gentoo.org \
--to=floppym@gentoo.org \
--cc=gentoo-dev@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox