From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 94F261382C5 for ; Mon, 4 Jan 2021 07:12:21 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id D0249E0880; Mon, 4 Jan 2021 07:12:20 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id B1BC3E0880 for ; Mon, 4 Jan 2021 07:12:20 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 3C13234115C for ; Mon, 4 Jan 2021 07:12:19 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id A211C332 for ; Mon, 4 Jan 2021 07:12:17 +0000 (UTC) From: "Ulrich Müller" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Ulrich Müller" Message-ID: <1609744278.3232aa12738915cfecf3663672ea59b90a79772b.ulm@gentoo> Subject: [gentoo-commits] data/glep:master commit in: / X-VCS-Repository: data/glep X-VCS-Files: glep-0063.rst X-VCS-Directories: / X-VCS-Committer: ulm X-VCS-Committer-Name: Ulrich Müller X-VCS-Revision: 3232aa12738915cfecf3663672ea59b90a79772b X-VCS-Branch: master Date: Mon, 4 Jan 2021 07:12:17 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply X-Archives-Salt: af38db86-eab3-4bc3-aaf1-b02159a862e2 X-Archives-Hash: 13650195e3b9daa76f2a343d5273b19f commit: 3232aa12738915cfecf3663672ea59b90a79772b Author: Mike Gilbert gentoo org> AuthorDate: Thu Dec 17 17:43:40 2020 +0000 Commit: Ulrich Müller gentoo org> CommitDate: Mon Jan 4 07:11:18 2021 +0000 URL: https://gitweb.gentoo.org/data/glep.git/commit/?id=3232aa12 glep-0063: Add section about the Gentoo keyserver Closes: https://bugs.gentoo.org/760923 Signed-off-by: Mike Gilbert gentoo.org> Signed-off-by: Ulrich Müller gentoo.org> glep-0063.rst | 32 ++++++++++++++++++++++++-------- 1 file changed, 24 insertions(+), 8 deletions(-) diff --git a/glep-0063.rst b/glep-0063.rst index 82541bd..80ca81d 100644 --- a/glep-0063.rst +++ b/glep-0063.rst @@ -7,10 +7,10 @@ Author: Robin H. Johnson , Michał Górny Type: Standards Track Status: Final -Version: 2.1 +Version: 2.2 Created: 2013-02-18 -Last-Modified: 2019-11-07 -Post-History: 2013-11-10, 2018-07-03, 2018-07-21, 2019-02-24 +Last-Modified: 2020-12-17 +Post-History: 2013-11-10, 2018-07-03, 2018-07-21, 2019-02-24, 2020-12-17 Content-Type: text/x-rst --- @@ -28,6 +28,9 @@ OpenPGP key management policies for the Gentoo Linux distribution. Changes ======= +v2.2 + Added information about the Gentoo keyserver. + v2.1 A requirement for an encryption key has been added, in order to extend the GLEP beyond commit signing and into use of OpenPGP for dev-to-dev @@ -114,7 +117,7 @@ Keys that do not conform to them can not be used to commit. 6. UID using your ``@gentoo.org`` e-mail included in the key. -7. Upload your key to the SKS keyserver rotation before usage! +7. Keys must be uploaded to the Gentoo keyserver. Recommendations --------------- @@ -135,8 +138,13 @@ their primary key). 5. Encrypted backup of your secret keys. +6. Upload to SKS or another public keyserver pool. + +Gentoo Infrastructure +===================== + Gentoo LDAP -=========== +----------- All Gentoo developers must list the complete fingerprint for their primary keys in the "``gpgfingerprint``" LDAP field. It must be exactly 40 hex digits, @@ -147,6 +155,14 @@ of the fingerprint field. In any place that presently displays the "``gpgkey``" field, the last 16 hex digits of the fingerprint should be displayed instead. +Gentoo Keyserver +---------------- + +Gentoo infrastructure uses a keyserver that is isolated from the SKS pool. +This keyserver is restricted to accepting uploads from authorized Gentoo hosts. +Instructions for uploading keys to this server may be found at +https://keys.gentoo.org/. + Backwards Compatibility ======================= @@ -212,6 +228,6 @@ Copyright Copyright (c) 2013-2019 by Robin Hugh Johnson, Andreas K. Hüttel, Marissa Fischer, Michał Górny. -This work is licensed under the Creative Commons Attribution-ShareAlike 3.0 -Unported License. To view a copy of this license, visit -https://creativecommons.org/licenses/by-sa/3.0/. +This work is licensed under the Creative Commons Attribution-ShareAlike 4.0 +International License. To view a copy of this license, visit +https://creativecommons.org/licenses/by-sa/4.0/.