Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

On NUT website (so impacting NUT sources) publish the maintainer GPG key(s) and instructions #1963

Closed
jimklimov opened this issue Jun 13, 2023 · 2 comments · Fixed by #1976
Closed

On NUT website (so impacting NUT sources) publish the maintainer GPG key(s) and instructions #1963

jimklimov opened this issue Jun 13, 2023 · 2 comments · Fixed by #1976
Labels
documentation GPG/PGP/GnuPG Know-how about use of signing
Milestone
2.8.1

Comments

@jimklimov
Copy link
Member

jimklimov commented Jun 13, 2023 •
edited
Loading

Follow-up from #1410

Example instructions at https://www.apache.org/dyn/closer.cgi#verify
@jimklimov jimklimov added this to the 2.8.1 milestone Jun 13, 2023
@jimklimov
Copy link
Member Author

Instructions are already addressed by docs/security.txt file.

What's needed is an update of http://www.networkupstools.org/source/nut-key.gpg

@jimklimov
Copy link
Member Author

jimklimov commented Jun 30, 2023 •
edited
Loading

Maintainer notes for posterity:

:; gpg --with-colons --import-options import-show --dry-run --import < nut-key.gpg
  • Old keys can be imported into a temporary keychain (existing files and slashes in args are important):
:; rm tmpring.gpg ; touch tmpring.gpg
:; gpg --no-default-keyring --keyring ./tmpring.gpg --import nut-old-key.gpg
:; gpg --no-default-keyring --keyring ./tmpring.gpg --import nut-key-2.7.3.gpg
:; gpg --no-default-keyring --keyring ./tmpring.gpg --import ~/.gnupg/HEXCODEMYNEWKEYCHAIN.pub
  • This (binary) keychain can be exported into ASCII and update the keychain used by default:
:; gpg --no-default-keyring --keyring ./tmpring.gpg --export -a > nut-key.gpg

jimklimov added a commit to networkupstools/nut-source-archive that referenced this issue Jun 30, 2023
@jimklimov
nut-key*.gpg: add "Jim Klimov ..." DE0184DA7043DCF7
4d3692b 
See-also: networkupstools/nut#1410
See-also: networkupstools/nut#1963
@jimklimov jimklimov mentioned this issue Jun 30, 2023
Merged
jimklimov added a commit to jimklimov/nut that referenced this issue Jun 30, 2023
@jimklimov
docs/security.txt, docs/nut.dict: update "verifySourceSig" chapter wi…
4be5c2a 
…th new GPG key set for "Jim Klimov ..." DE0184DA7043DCF7 [networkupstools#1963]
jimklimov added a commit to jimklimov/nut that referenced this issue Jun 30, 2023
@jimklimov
docs/security.txt: add maintainer notes on updating nut-key.gpg [netw…
36e4769 
…orkupstools#1963]
jimklimov added a commit to jimklimov/nut that referenced this issue Jun 30, 2023
@jimklimov
docs/security.txt, docs/nut.dict: add a chapter on checksum file veri…
1d73aac 
…fication [networkupstools#1963]
@jimklimov jimklimov mentioned this issue Jun 30, 2023
Merged
jimklimov added a commit to networkupstools/networkupstools.github.io that referenced this issue Apr 3, 2024
@jimklimov
nut-key*.gpg: add "Jim Klimov ..." DE0184DA7043DCF7
e1cfbf7 
See-also: networkupstools/nut#1410
See-also: networkupstools/nut#1963

(Added in nut-source-archive a year ago, but did not get published)

Signed-off-by: Jim Klimov <jimklimov@gmail.com>
@jimklimov jimklimov added the GPG/PGP/GnuPG Know-how about use of signing label Apr 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
documentation GPG/PGP/GnuPG Know-how about use of signing
Projects
None yet
Milestone
2.8.1
1 participant
@jimklimov