------------------------------------------------------------------- Fri Jul 19 08:47:17 UTC 2024 - Marcus Meissner - make the per-project inclusion optional, default off. ------------------------------------------------------------------- Thu Jul 18 12:13:36 UTC 2024 - Marcus Meissner - also include the GPG key from the current build project ------------------------------------------------------------------- Thu Mar 7 10:19:49 UTC 2024 - Marcus Meissner - switch the container key to the new 4096RSA key by default - obsolete the 1024bit RSA key from SLES 11, so it gets deinstalled from migrated systems. ------------------------------------------------------------------- Mon Oct 16 08:55:24 UTC 2023 - Marcus Meissner - build-container-d4ade9c3-5a2e9669.pem: added missing current PEM container key. - install the PEM files to the container dir, not the .asc files (bsc#1216203) ------------------------------------------------------------------- Tue Sep 12 10:08:56 UTC 2023 - Marcus Meissner - remove gpg, fileutils, mktemp, sh-utils requires as they are not needed by the package main functionality, but only by dumpsigs. ------------------------------------------------------------------- Mon May 15 09:44:20 UTC 2023 - Marcus Meissner - updated with all current changes - gpg-pubkey-3fa1d6ce-63c9481c.asc: Upcoming SLE RSA 4096 bit signing key. - gpg-pubkey-25db7ae0-645bae34.asc: New SLE RSA 4096 bit backup signing key. - gpg-pubkey-09d9ea69-645b99ce.asc: New ALP RSA 4096 bit signing key. - gpg-pubkey-73f03759-626bd414.asc: New ALP RSA 4096 bit backup signing key. - suse_ptf_key.asc: switch to use current RSA 2048 bit key - suse_ptf_4096_key.asc: upcoming RSA 4096 bit key for SUSE PTFs. - build-container-8fd6c337-63c94b45.asc: New SLE RSA 4096 bit container signing key (GPG format). - build-container-8fd6c337-63c94b45.pem: New SLE RSA 4096 bit container signing key (PEM format). ------------------------------------------------------------------- Fri Jun 11 09:49:11 UTC 2021 - Dirk Müller - remove dumpsigs for SLE12+ (rpm 4.x) (bsc#1186827) ------------------------------------------------------------------- Mon Sep 21 08:30:03 UTC 2020 - Marcus Meissner - suse build key extended (bsc#1176759) gpg-pubkey-39db7c82-5847eb1f.asc -> gpg-pubkey-39db7c82-5f68629b.asc ------------------------------------------------------------------- Thu Aug 13 09:32:26 UTC 2020 - Marcus Meissner - actually the container key is different from the build signing key. (PM-1845 bsc#1170347) ------------------------------------------------------------------- Thu Apr 23 13:32:45 UTC 2020 - Marcus Meissner - add a /usr/share/container-keys/ directory for GPG based Container verification. - Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347) ------------------------------------------------------------------- Wed Mar 11 09:09:42 UTC 2020 - Marcus Meissner - created a new security@suse.de communication key (bsc#1166334) ------------------------------------------------------------------- Tue Nov 13 12:41:24 UTC 2018 - meissner@suse.com - include ptf key in the key directory to avoid it being stripped via %doc stripping. (bsc#1044232) ------------------------------------------------------------------- Wed Mar 28 14:56:15 UTC 2018 - meissner@suse.com - created a new security@suse.de communication key. (bsc#1082022) - extended the PTF key and the SLE10 build@suse.de key. (bsc#1085512) ------------------------------------------------------------------- Wed Dec 7 16:35:05 UTC 2016 - meissner@suse.com - extend the build@suse.de product key. (bsc#1014151) pub 2048R/39DB7C82 2013-01-31 [expires: 2020-12-06] uid SuSE Package Signing Key ------------------------------------------------------------------- Tue Nov 29 12:54:46 CET 2016 - ro@suse.de - use dumpsigs script from openSUSE to merge code ------------------------------------------------------------------- Thu Oct 2 12:45:05 UTC 2014 - meissner@suse.com - renamed security_at_suse_de.asc to security_at_suse_de_old.asc - security_at_suse_de.asc: new 4096 bit RSA key. pub 4096R/317CD502 2014-10-02 SUSE Security Team bnc#899509 ------------------------------------------------------------------- Fri Aug 29 08:28:03 UTC 2014 - meissner@suse.com - Went to new method again. - suse-build-key.gpg blob dropped - ship seperate files ------------------------------------------------------------------- Mon Feb 10 09:57:50 UTC 2014 - meissner@suse.com - create suse-build-key.gpg during build. - Remove old keys from keyring. (fate#314767) Keys currently inside the RPM trusted keyring: - pub 2048R/39DB7C82 SuSE Package Signing Key - pub 2048R/50A3DD1C SuSE Package Signing Key (reserve key) - Various keys are moved to the documentation area (/usr/share/doc/packages/suse-build-key) - build-at-suse-sle11.asc: the old SUSE Linux Enterprise 11 key. if SUSE Linux Enterprise 11 packages need to be verified on a SUSE Linux Enterprise 12 system. - suse_ptf_key.asc: The suse ptf key. For verification of provided PTFs. - security_at_suse_de.asc: Use only for email encryption and verification purposes when contacting our security contact address security@suse.de ------------------------------------------------------------------- Mon Jan 13 15:01:24 UTC 2014 - meissner@suse.com - reverted to contain the fullkeyring build SLE12 Alpha. - also list the old sle11 build@suse.de key temporary ------------------------------------------------------------------- Thu Jan 9 12:29:53 UTC 2014 - meissner@suse.com - Merged over logic from openSUSE-build-key. - Got rid of default importing into roots keyring. - Removed some old keys. - Clarify that security@suse.de is a email only key - PTF key is supplied also as %doc, to not be default imported. - Keys currently inside: - pub 2048R/39DB7C82 SuSE Package Signing Key - pub 2048R/50A3DD1C SuSE Package Signing Key (reserve key) - pub 1024D/B37B98A9 SUSE PTF Signing Key - pub 2048R/3D25D3D9 SuSE Security Team ------------------------------------------------------------------- Thu Jan 31 17:11:08 CET 2013 - ro@suse.de - added future signing key for SLES (fate#314767) (bnc#801055) using 2048 bit rsa key ------------------------------------------------------------------- Mon Jan 14 01:55:36 CET 2013 - ro@suse.de - added reserve key for SLES (fate#312896) 50A3DD1C SuSE Package Signing Key (reserve key) valid until (2017-01-13) ------------------------------------------------------------------- Sun Oct 21 23:03:01 CEST 2012 - ro@suse.de - export keys to single files in /usr/lib/rpm/gnupg/keys ------------------------------------------------------------------- Mon Dec 12 12:02:49 CET 2011 - ro@suse.de - reduced key list. remaining keys: 307E3D54 SuSE Package Signing Key 3D25D3D9 SuSE Security Team 9C800ACA SuSE Package Signing Key B37B98A9 SUSE PTF Signing Key ------------------------------------------------------------------- Fri Jan 28 13:02:42 CET 2011 - ro@suse.de - if we have to set $HOME, we also have to export the variable (bnc#665912) ------------------------------------------------------------------- Tue May 4 16:11:41 CEST 2010 - ro@suse.de - updated keys: (bnc#600157,bnc#599167) - 307E3D54 build@suse.de "SuSE Package Signing Key" (2014-05-03) - 9C800ACA build@suse.de "SuSE Package Signing Key" (2014-05-03) - B37B98A9 support@suse.com "SUSE PTF Signing Key" (2014-05-03) - 7E2E3B05 novell-provo-build@novell.com "Novell Provo Build" (2014-05-06) - added keys: - 1D061A62 support@novell.com "build@novell.com (Novell Linux Products)" (2014-05-06) ------------------------------------------------------------------- Fri Oct 31 14:28:18 CET 2008 - ro@suse.de - added ptf key, expiring 2010-07-02 ------------------------------------------------------------------- Mon Jun 2 15:45:33 CEST 2008 - ro@suse.de - update keys again: for collaboration with rpm, the current self-signature needs to be the first signature found in a key ------------------------------------------------------------------- Mon May 5 18:31:20 CEST 2008 - ro@suse.de - updated keys 9C800ACA,8495160C,307E3D54: extend expiration by 2 years until 2010-05-05 7E2E3B05: extend expiration by 2 years until 2010-05-24 ------------------------------------------------------------------- Mon Mar 19 16:49:05 CET 2007 - rguenther@suse.de - merge suse-build-key keyring to roots gpg pubring ------------------------------------------------------------------- Mon May 29 17:20:45 CEST 2006 - ro@suse.de - added new official provo dsa autobuild key ID 7E2E3B05 ------------------------------------------------------------------- Fri May 19 14:02:59 CEST 2006 - ro@suse.de - removed unused provo autobuild key - added new official provo autobuild key ID A1912208 ------------------------------------------------------------------- Thu Apr 20 12:47:18 CEST 2006 - ro@suse.de - add dumpsigs script here to have _one_ place for the script ------------------------------------------------------------------- Fri Mar 31 16:53:02 CEST 2006 - ro@suse.de - added build@suse.de rsa key ID 307E3D54 ------------------------------------------------------------------- Wed Jan 25 21:47:54 CET 2006 - mls@suse.de - converted neededforbuild to BuildRequires ------------------------------------------------------------------- Tue Oct 18 17:47:07 CEST 2005 - ro@suse.de - use correct provo autobuild key ------------------------------------------------------------------- Tue Oct 18 12:28:04 CEST 2005 - ro@suse.de - added provo autobuild signing key (#128128) - removed jds key ------------------------------------------------------------------- Fri May 27 14:47:30 CEST 2005 - mls@suse.de - added mktemp to PreReqs [#86177] ------------------------------------------------------------------- Thu Apr 28 11:45:36 CEST 2005 - ro@suse.de - added JDS public key (15c17deb) ------------------------------------------------------------------- Tue Jan 25 18:10:26 CET 2005 - ro@suse.de - added OES public key (0dfb3188) ------------------------------------------------------------------- Tue Jun 22 12:28:07 CEST 2004 - ro@suse.de - updated build key (expiration changed to 2008-06-21) (#42326) ------------------------------------------------------------------- Tue Feb 24 12:19:49 CET 2004 - hmacht@suse.de - building as non-root ------------------------------------------------------------------- Tue Sep 9 18:51:02 CEST 2003 - ro@suse.de - ignore return code from first gpg calls ------------------------------------------------------------------- Tue Sep 9 18:23:07 MEST 2003 - draht@suse.de - call gpg twice without any arguments for proper initialization inside postinstall ------------------------------------------------------------------- Tue Sep 9 17:43:55 MEST 2003 - draht@suse.de - use temp file instead of pipe due to resource race between two instances of gpg in %post. ------------------------------------------------------------------- Thu Sep 5 04:56:32 CEST 2002 - draht@suse.de - package now installs key from package-owned file into the rpm pubring in %post to allow other key packages to add their keys. ------------------------------------------------------------------- Tue Aug 20 10:46:52 CEST 2002 - mmj@suse.de - Correct PreReq ------------------------------------------------------------------- Fri Jul 26 09:50:14 CEST 2002 - kukuk@suse.de - Change Provides from suse-build-key to build-key ------------------------------------------------------------------- Thu Feb 21 00:10:52 MET 2002 - draht@suse.de - directory permission problem: 644 -> 755. ------------------------------------------------------------------- Mon Feb 18 12:16:34 CET 2002 - ro@suse.de - moved to /usr/lib/rpm/gnupg/pubring.pgp rpm needs a directory as gpg_path and will use pubring.gpg in that directory ------------------------------------------------------------------- Wed Feb 13 20:45:46 MET 2002 - draht@suse.de - initial package. Contains - pub 2048R/3D25D3D9 1999-03-06 SuSE Security Team - pub 1024D/9C800ACA 2000-10-19 SuSE Package Signing Key - sub 2048g/8495160C 2000-10-19 [expires: 2006-02-12]