Bug 40638 - Sign 'release' file for Sisyphus with RSA 4096 key DA2773BB
Summary: Sign 'release' file for Sisyphus with RSA 4096 key DA2773BB
Status: CLOSED FIXED
Alias: None
Product: Infrastructure
Classification: Infrastructure
Component: girar (show other bugs)
Version: unspecified
Hardware: x86 Linux
: P5 normal
Assignee: placeholder@altlinux.org
QA Contact: Andrey Cherepanov
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-08-03 09:28 MSK by Vitaly Chikunov
Modified: 2021-08-24 00:11 MSK (History)
3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Vitaly Chikunov 2021-08-03 09:28:07 MSK 
Необходимо подписывать release для Сизифа уже готовым для этого RSA-4096 ключом:

simple-key "sisyphus" {
        Fingerprint "DF6C02E5F174D7CDF792A9CDFF979DEDDA2773BB";
        Group "alt";
        Name "ALT Sisyphus <alt-sisyphus@altlinux.org>";
}

ps. К сожалению, 2 года из его 5-летнего срока жизни уже прошли (2019-05-16 - 2024-05-14).
Comment 1 Dmitry V. Levin 2021-08-03 12:34:40 MSK 
А почему apt-repo-tools?
Comment 2 Vitaly Chikunov 2021-08-03 14:42:41 MSK 
Пожалуйста, перевешивайте на боле подходящий компонент.
Comment 3 Dmitry V. Levin 2021-08-03 14:52:24 MSK 
(In reply to Vitaly Chikunov from comment #2)
> Пожалуйста, перевешивайте на боле подходящий компонент.

Мне кажется, что в пакетах всё необходимое уже есть.
Comment 4 Gleb F-Malinovskiy 2021-08-03 15:04:09 MSK 
Да, ключ давно есть в alt-gpgkeys и vendors.list.d/alt.list, достаточно только в сборочнице переключить.
Comment 5 Dmitry V. Levin 2021-08-22 02:20:35 MSK 
Давайте тогда переключим!
Comment 6 Dmitry V. Levin 2021-08-23 14:20:47 MSK 
Should be fixed now.
Comment 7 Vitaly Chikunov 2021-08-24 00:07:32 MSK 
Confirm that `/ALT/Sisyphus/x86_64/base/release` is signed using sha512 with key 0xFF979DEDDA2773BB which is self-signed with sha256.
Comment 8 Dmitry V. Levin 2021-08-24 00:11:27 MSK 
(In reply to Vitaly Chikunov from comment #7)
> Confirm that `/ALT/Sisyphus/x86_64/base/release` is signed using sha512 with
> key 0xFF979DEDDA2773BB which is self-signed with sha256.

It's already self-signed using sha512 in http://git.altlinux.org/people/ldv/packages/?p=alt-gpgkeys.git;a=commit;h=3df9145c01a4515c073d1243dfd18f97a34f6a0d and will hopefully be included in the next release of alt-gpgkeys.