From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Q42W7-0003Y4-Mt for garchives@archives.gentoo.org; Mon, 28 Mar 2011 02:49:20 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 004C11C099; Mon, 28 Mar 2011 02:49:09 +0000 (UTC) Received: from qmta01.westchester.pa.mail.comcast.net (qmta01.westchester.pa.mail.comcast.net [76.96.62.16]) by pigeon.gentoo.org (Postfix) with ESMTP id F26FA1C005 for ; Mon, 28 Mar 2011 02:48:40 +0000 (UTC) Received: from omta16.westchester.pa.mail.comcast.net ([76.96.62.88]) by qmta01.westchester.pa.mail.comcast.net with comcast id QSYV1g0031uE5Es51SohNc; Mon, 28 Mar 2011 02:48:41 +0000 Received: from [192.168.1.13] ([69.251.104.163]) by omta16.westchester.pa.mail.comcast.net with comcast id QSoe1g00G3XYSBH3cSog8T; Mon, 28 Mar 2011 02:48:41 +0000 Message-ID: <4D8FF6D0.5050008@gentoo.org> Date: Sun, 27 Mar 2011 22:47:44 -0400 From: Kumba User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.15) Gecko/20110303 Lightning/1.0b2 Thunderbird/3.1.9 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] Re: rejecting unsigned commits References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Archives-Salt: X-Archives-Hash: 180cddfe555d0a4be810ef6520def50c On 03/25/2011 14:30, Mike Frysinger wrote: > for people who dont have a key yet: > http://www.gentoo.org/proj/en/devrel/handbook/handbook.xml?part=2&chap=6 > > for people interested, bugs to get repoman extended to make the gpg > process smoother: > http://bugs.gentoo.org/360459 > http://bugs.gentoo.org/360461 > -mike So I'm one of those that became a dev before GPG keys were required (I think). at some point, though, I created one on an old machine I had, which was my primary dev machine at the time. But the machine died, and I never got the key off (I never used it). The drive is still good, but it's lost in a pile of boxes somewhere. Rather than mounting an expedition to find it, it's probably easier for me to generate a new key, but this raises a few questions, because I'm a complete idiot when it comes to GPG/PGP stuff: 1. How can I revoke the old key? The revocation cert is probably on the same drive. 2. The dev manual states not to create a key with an expiration longer than 6 months. How does this impact items signed already if the key has to be replaced bi-annually? (I suspect I'm not fully grasping something here w/r to GPG). 3. If I'm going to start using GPG, I might as well use it for a few things. Anyone got pointers for cross-platform use, i.e., Thunderbird on Windows? -- Joshua Kinard Gentoo/MIPS kumba@gentoo.org "The past tempts us, the present confuses us, the future frightens us. And our lives slip away, moment by moment, lost in that vast, terrible in-between." --Emperor Turhan, Centauri Republic