From 149e29660e2f167c96abae3b03472e401b79932b178188072d847e1f6a7878e6 Mon Sep 17 00:00:00 2001 From: Marcus Meissner Date: Mon, 14 Jun 2021 07:37:37 +0000 Subject: [PATCH] Accepting request 899537 from home:dirkmueller:Factory This syncs from SUSE:SLE-15:Update. the slightly non-incremental changelog can't be avoided. - suse build key extended (bsc#1176759) gpg-pubkey-39db7c82-5847eb1f.asc -> gpg-pubkey-39db7c82-5f68629b.asc - actually the container key is different from the build signing key. (PM-1845 bsc#1170347) - add a /usr/share/container-keys/ directory for GPG based Container verification. - Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347) - created a new security@suse.de communication key (bsc#1166334) - include ptf key in the key directory to avoid it being stripped via %doc stripping. (bsc#1044232) OBS-URL: https://build.opensuse.org/request/show/899537 OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=33 --- build-container-d4ade9c3-5a2e9669.asc | 19 ++ ...1f.asc => gpg-pubkey-39db7c82-5f68629b.asc | 16 +- security_at_suse_de.asc | 220 +++++++++++------- suse-build-key.changes | 31 ++- suse-build-key.spec | 39 ++-- 5 files changed, 214 insertions(+), 111 deletions(-) create mode 100644 build-container-d4ade9c3-5a2e9669.asc rename gpg-pubkey-39db7c82-5847eb1f.asc => gpg-pubkey-39db7c82-5f68629b.asc (58%) diff --git a/build-container-d4ade9c3-5a2e9669.asc b/build-container-d4ade9c3-5a2e9669.asc new file mode 100644 index 0000000..b8f5797 --- /dev/null +++ b/build-container-d4ade9c3-5a2e9669.asc @@ -0,0 +1,19 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v2.0.15 (GNU/Linux) + +mQENBFoulmkBCAC8z90eiLqdLLuFsocthStfLoG/fklt2gjOfLm9IWJFcCmvQpLn +pTw+6B0aaH693sfxg2XHZg4nHO/TYGWytyZYNlxeMTdemyL8gcV9Fks53DBH67ww +0XHBFRXPHIjMoa1tERVV9c99vZdzoUvn+0S9C1Qq5Hpd3NJpq/ZGdXkjJsIHT2zQ +2nQBRt2LkR9J7gg26qBj5UVguO8zmidsBAs3dsUtLhC6TroOG/3dmLo3CinAvUXT +tQ8Lm5p2TJ49K0/c8DQ4A56aP29kAM5bHlp2wYIohKzyKmE0LmYNWgvLxHLj0yzd +5BdGNVA4xyjdg1/wCGwh3EM0FU3xVMMpWQQPABEBAAG0OlNVU0UgTGludXggQ29u +dGFpbmVyIFNpZ25pbmcgS2V5IDxidWlsZC1jb250YWluZXJAc3VzZS5kZT6JAT4E +EwECACgFAloulmkCGwMFCRLMAwAGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJ +EI7+G8TUrenDlswH/1PwQuV0Um6J5csZIcde25Ip/LJMoldJb9aVpBxn70WWL6GF +AVoVTNFYYPHUbzv9/x2PPLRy2tcta+YZOKvcFbkM2SHXz1KF95Lg50pDr++DWog+ +SDszvq3oVeIt3OIqvL1gbmp3V13qPLboFR+q3jMqMxUh9bYQX3rpH/cWq7h8yurL +KaiR9yQvHaPSrcGuJUGTr2zbEPBYCoMnEPuF/fNjwaTHmEX2fzoYhmIOZMH5x5W+ +F1GOCZrK34QrdHuS+LmpV8mQz0+Qpd7LOGcd8wF3K2ep5xiwpOdzBELiekZaxrJ1 +o0UviorRX4DPHLXZvyqPCCpYLWzj9b7rHCuenoQ= +=BucV +-----END PGP PUBLIC KEY BLOCK----- diff --git a/gpg-pubkey-39db7c82-5847eb1f.asc b/gpg-pubkey-39db7c82-5f68629b.asc similarity index 58% rename from gpg-pubkey-39db7c82-5847eb1f.asc rename to gpg-pubkey-39db7c82-5f68629b.asc index faff0fb..ee13f10 100644 --- a/gpg-pubkey-39db7c82-5847eb1f.asc +++ b/gpg-pubkey-39db7c82-5f68629b.asc @@ -8,12 +8,12 @@ hieh/QxpoDyYd5w/aky3z23erCoEd+OPfAqEHd5tQIa6LOosa63BSCEl3milJ7J9 vDmoGPAoS6ui7S2R5X4/+PLN8Mm2kOBrFjhmL93LX0mrGCMxsNsKgP6zabYKQEb8 L028SXvl7EGoA+Vw5Vd3wIGbM73PfbgNrXjfABEBAAG0KFN1U0UgUGFja2FnZSBT aWduaW5nIEtleSA8YnVpbGRAc3VzZS5kZT6JATwEEwECACYCGwMGCwkIBwMCBBUC -CAMEFgIDAQIeAQIXgAUCWEfrHwUJDsIitAAKCRBwr56BOdt8gpqUB/wPSSS5BcDu -Oi4n02cj4Hdt7WITKBjjo0lG1fXG1ppx1wOST+s8FertMVFY53TW6FGjcYtwVOIq -rsMYiV6kf1NxUV/jcAy7VmC5EZnO0R/D3sT4Oh5hsLtERauZolK5BZmd0S51Qa8e -TxZ5mX9PL2i3s/ShETc30drf83ugc7B4yZPNQWXNDPgGcC+hEeC5qw48RzHYIpUt -RzHmefR5Z3ioTUbDlzy+SGP2uA7mhR4Lfk/df5fYxWfCoKlyGjtrvA65cB+Pksyn -xrAeBuB+vBM+KnDrxW2Sn4AbWkzH//dfz9OJDJu4UM91hb7qxM0OkrXHQV3iNqzg -MDEhky/9NqMy -=GdP5 +CAMEFgIDAQIeAQIXgAUCX2himwUJFeKaMAAKCRBwr56BOdt8glQcCACXQAkHKf0y +7EPlayuX/EHc8sro4IAJDZqQFiPaJh8F+5HWD36+iw3D/HlOlzbd2y9oVqtbVDZV +amOJ0KV+l2oxPbMVg32plYGXLlXh1Gwp7/lLWieceXVzf3AbleejgXfafUyiCuvj +VaQyPNcGlEXIjiwi3qulw0+2rYAiUAf6KEq4wM9a/KLTLMhvxi2NigC+MiIbZtmt +HlpFhMkp+Bdpdcqtz6cAucE3dSpVQcvkfNLOkZgrtkZfzkNBPaWnyZLtWdSrQah2 +vdIQX+RvMYVAQP4x+aL44ALlhnyeUST0wIX4AH82ifSnpvz/rEb1kpERj3XhwW+N +NPBstHtGpA+l +=cJ/8 -----END PGP PUBLIC KEY BLOCK----- diff --git a/security_at_suse_de.asc b/security_at_suse_de.asc index e873e67..1f3b18b 100644 --- a/security_at_suse_de.asc +++ b/security_at_suse_de.asc @@ -7,94 +7,140 @@ keyring using the following command: gpg --import security_at_suse_de.asc -This key is only used for E-Mail encryption and signing. - +This key is only used for E-Mail encryption and signing -----BEGIN PGP PUBLIC KEY BLOCK----- -mQINBFqqoaIBEAC3CIF5H+w9r5SP1uHf6rbsXkyoFoOJcAsT1lub/pshYcZokDnW -XuuA4ycTbNX+zvcRi+cSUe07b755uDTxNf6DfGBnpG9x+f79CJ4vciBi5G51yP4d -jVdSPP9ZqvKH1Gxsl0qTPMyvNqH0dkfbBCwMNTxzEwm3Bt8YW4bcs/yIDXw6dPqP -3dLMuhdXGP+aJBf3BGzSeL9TrXXlYe2yya2BtelzXibSZ+WO81mkNX0Pcq61luLY -36cx3l6or+FYLMMjM4ZB7md6YxvTH62q+sSI1MZrbs5Y5qUxwUjmoZGQM+d4YfSh -dKKz90/ORpJV7l4sTwmShySU05exi5PaRRe6rXBjiMDssqY6NTcapZS+a7JtwC8c -CW7LUFMKGPOkQS3pwEijcI7qYWxjw8D929t2B6L9sVMk/A6rufhZaK/oqpAYFXmg -FzO8w1jwIZ2AdCP/zqVSZdNzSRIaMu+XMcebgGJI3EIIJjHIQnEIdcTneLbBqmKI -r/wvKA+V6R96t9qPZyeP7ttjAU903BoBZgXhLrysh32/eSaudBstYE5LaCVRKKz0 -1F8YyDSd3uw2AJzPRqtsucyJFkXz3UFybobER98eKxIb2csHRRZLNAjsaG9bFKo4 -LkvcBU4MPZRjvAMrxRiz5hNTWhXyAp1Qf6HkANCMT6K4NRUj3LKxa0GCCQARAQAB +mQINBF5ngbYBEACq6KLsgizrqkh6/m/jWE3jY0Q3RoI6eKmCnxbdhnW5g5drUtuF +LB6BADuIiMjPou4cSjNG4siYIqgcd6pw2eSPFfijKaLO5i1n+UFfFf0mcDxLM3AW +b1Dx7IVVUo3Ybm743o9tXrF0ao4WQfwYm/K2Qf7jTmeaXFN2h5GtlDcvqDsEsZhR +mowPG+jsNgHn2QJTicGPsMWgo/WdJZISY359iRzeYzkx+YIe/12Yt4l3nLtnHjag +ICmQlS/Gc+gG/KCXExJfFypwTj32iHnHTI/xXifT0OIEgJjPgYDW5JiRUAKUxZ21 +K2viFOd5LveYUO6dSnqCQp1WWzYCOfchpH2SAtMKEesmF2Kzd7bFJFI7NPJxK2oA +EJQof/F5UIij/yugDohJ1SywFuM3nd0x2crUgjzkw5WtKvZstNp4yw80d8+5lqRl +LLtmFt6p9gmqVN1pwQv3my21F1TMy2gJLvqpOgLB7M1pNFazEc01V8+jjGCNjCI3 +2T37UAISsWqTxfHd42CpyNhf2UJu1tUf2plGmJ4bNAeoFO4SuSiPgC1KTq8qKcws +93OK+w9nI4qcHPMrQy2nxezbzi4M+qeqGn4PbFQQ4FnpamxfJ4srO3kTJnpVcXS9 +p5oCmGubO/ecki8HL/pRo/b0HuHPfoxlmDeK+jNQMpO/mAsV2Kv/hjjdqwARAQAB tCZTVVNFIFNlY3VyaXR5IFRlYW0gPHNlY3VyaXR5QHN1c2UuY29tPokCUwQTAQoA -PRYhBOx8XqssNAmmTzu+biH+kjIrqeBnBQJaqqH5AhsDBQkDwmcABQsJCAcDBBUK -CQgFFgMCAQACHgECF4AACgkQIf6SMiup4GcsPA/+OLtQCiy0Fo/kfU9gezGnnADc -bquRIsQUZm/4XjuNkIhbE1YB9lHWwDj5h5VJRO6iJ952D8aiEAnrn8T7bVncycgs -oNJnTL7vjoxYUaB1H+aRzeEu0bXKMd5IpcPNjzrRixuGhaadYvi9Lyx6Am6ohlnK -T8OiySoSdzGd9OIOtpUHUjsbKw0rQQhcobnLWVc0MkVc75sRW9gZ83GYNudd1wCo -qAa4XFENI/M3/KN3rNLfmd0ky00o2RWdynY4hQNF3yYZsYPUY7WjO6KCCQ+DOr4S -WzXNvwfKfOvwPi91EzgRYGLI0MPrNO6qDB83SvNNaqcv9lsoLVqYjLrvoNWXfpiU -b6A+ebAuuTwuR23Yyn07CcoTLAnSWeY2RblWXkwgsQD6xRgNo56gA+Yk66NOWA2u -tVlgtbDwT/bPd7l6i6kOKLGCOSMmpuRC+YdqNnk3UyOACrR+jhnV34ytXHmYhHRa -fb/UUr4c5tOiu2W2fsPwYMxdhlOqAz7EQAqwYhtjtK9MeB30tbAr1CidpiM8rsdB -k6cRpYec2iudpGH0DyzSDyRpCBB535NUnwSffvAsnAeXbX2JxZp+cyIKKj/s1kOG -1fMpDceDK1bdycIaB78okkjzmvL+BMm7QbI4eKm4UBDRYAK0BJ8MuRY7W4eRqLqN -Sk5dmzRF3rqFunU2FpWJAjMEEAEKAB0WIQR8Sv1h2KrnVweWpRciCdaQL5aclQUC -WqqiJwAKCRAiCdaQL5aclXXVD/9yhYIjnipvE1GL5yImLChiDF4dcvsJL59UWjLN -Qo4WU52Djy8pgBtxYjldik9yHWQuA02w1prLjU7DUtwvnTRfrb1qqYXgEnWW+IA8 -XuLVRyIfV2ZH5W9HyidsDRjUTeU1aM6JPcuqMtQhcdPuHdEqguXgIuiz2uB47oVJ -YZVhGxwXyFbmLH2DjuynXdtExhR35zulqHy9+LEDNA24P7vE0TLL82WLiu7ri2j4 -UdHCL/xSSEEvY6SPIlER1o/J53FcnvrTU6N/PGG/Y/AYmtmiSKEzv5S6PFrDE5d+ -wodOyDoTeeO1g9JL//0hh7YHkE/Ba0qFtt8zxy1Fv7wnFNElh98f0B7oJfuoPuqD -pL6ddexrGHAv8RjB+C8poqiVbymIoeGl9tpFVJ35MQOqlg0Eu1UDicJbezAu2Lmf -gqOTo3DKWuoH5KBoYlyzkdmDahj4y0LHpdvbBUoN/pKWwHlmu6Z6OE5H+al3I5cv -+0AgkKDFlUmfUVR4tFpuCu0dOFD7V/vCLQ9hDhyLzhMKVJF53Fjmfxwh7bglIrsr -AyQzZeBZ9Bs8a7WHonz7dbLe7Xf+iS4fSlCpR8P1UhPAkKlUsMNU665RwBrfm/ms -J2m52kj4YWuNADbaU1EJWL5WtMuK/8fxmMCT2iZhL2cYhbpmpLMiRMAHg+E/IHSw -+5gX0LQlU1VTRSBTZWN1cml0eSBUZWFtIDxzZWN1cml0eUBzdXNlLmRlPokCUwQT -AQoAPRYhBOx8XqssNAmmTzu+biH+kjIrqeBnBQJaqqGiAhsDBQkDwmcABQsJCAcD -BBUKCQgFFgMCAQACHgECF4AACgkQIf6SMiup4GflRg//UomZ5rkcvWLnaTb8Txj7 -yEx0waU11IhGeG+/RcwcRNz/00D78G+gEFOdENt5JR1BUYe7Ka6aNw0tD6ZRtmw/ -8awEuIXCs0vrZt+9HZMD6g21KNORLXQ8aZIzmMS8rucMqARu94JvpK9QesepGuGU -SIH7NXimb6Zx9pnH5NU8m88l/sNZ40rBGb5vgJaiJt6tSbclR/fSUw34dRu8tmXh -J4ahvrebW4GOdIbnx1AtHC1VCmnmTkJvxUJs5w3n4VmUTBnflyf/BgUeg6Pcgk95 -CfiKMySLLq4X6TH6jvZuyTv9u6qyIzKyNRFgYhMfuded3giWzmk+kajcBuh+APsr -UAf2hY5bBlV/B+mnG3yvyDuLX2O4L5HbDVbNy5fEqj15+p4/fNpo0DTTIxsKCaTv -oZdN2+ayGim7pK6+jj8RwcehzFkVexdFxui/xOWcSCrKFjvtkOFE978De5uBzbUe -ByvXzWmlaKKARvoqyNMyDzSuA1QhGHroUGBUPdV9w6G4kvtxneH+36/pwNmw8Zn8 -jsnH2EaNrNYVZrOBK4XT1Q0AVfpv/alcXcIt67Un6h1HU4IvbRbQDmpTTceJzWxl -+b1oCBZYBHTexu9/EYyJGvV/ctKSQl6S3s3YyPE4IYnSvNTrYMJjcASulryC9wnc -ewT68nCCe2y9jS+LN8kJZ8iJAjMEEAEKAB0WIQR8Sv1h2KrnVweWpRciCdaQL5ac -lQUCWqqiJwAKCRAiCdaQL5aclQiRD/sFTTY9HuUcQgcw3h9Fo0z7i5QaJbSqRzW4 -SxcUz5qM4AV6IWijOKFz629u9nvpLCmH/YPnCklBiWjkL188d1wGQ0xUMhOFs3kR -1Jt5tEwlnLyIeRh4zEKnAWuPU5VAA0XfOvqon5nuMhXY6SJzwNyrWoAAaM0uNWrk -YdC2Qu5hgn3kWRjuZKh0k1NwdWVMw1KhhEdMJnrOQo/6ZuejfyHze+LjmW4Q5mT6 -6iEJp5zUK4QsboD8bq3KouasnrRaM8fSzobfyd5OTM5ibBDxk7zgADnhKkH1XeHS -ncxKxES6QqusbaLAhHSYwx4cDCWFjJ1r5RAAjye0OCCaG/GBLnhL9Gpzzl4HRLEg -Q+cPKytvCFHdL34DsNoexqPceHhw0RSpB/MljFXM3t/q+E1NJlSb6SUBk8tR1KCV -j8LWLZ8XJJgldHl9GQWIqTuJbrZ5kVhNM3M5z/bRHqSfbMkMALzsY5n9aUYb/Tnd -MsR10JNflBLgCrDBjbEUhIxb7Rj5FULoiGdj/UYrT2BwwkBDRiHJvcNCWVOOt90A -GfcgRerSfaGTE1kJReMQHLpGqjqS0ok4S7cgFObu1MacDpB4krTncA1CgUcKW8AM -WuhJ0ktaONEqSNN39m698GNLtLMkCvEUvGeSeLArQVfC/t0wq4rLFxRybxOFNa/w -H+j6ueOdXLkCDQRaqqGiARAAvtqnZG+39q8PAvdf7CZARFj6bA2mbNp9Zjy4kGiL -oxVuuCGpku1VvtTz64rY6fjurlBjfQJOKFEp8+RCrlvTijAfrvSrLway+o5RWG74 -z0SHYl9U5kgaFYSIy5O/NjSc0TCSM6RN0LPUE41dTyxzcQlcd2MGI787d+ObHRCg -w3+prVE2scqktek+uYLztUpDlJJY8a6u0W6gt6p96O1ViRZzi85NKzckm7FzDoGh -j6jVs7zrBmIbnXzK1R9AF2gP/4t+AAy9GKA9nTTVJFecmS4vsZ7wFaMBZjJ7vLi2 -Xk+T05Oy3KWyhnUHqvSXRZqPlg/kogssm5IGAA5kRkn1Yc/03rWc7BWDLM0vAjBy -n8k118XjRIoLBWCp5GLEwHGQ2hiMvGWzWajpVgfHpgnX96X8ndIlQfsg7DaIbT9E -SJUYjrLJG8SXt6uGcX4inCsM0wePwTXdiNRsp9w9XtDo4QFQ5skA+O5uW/bC/x23 -IKUbnkXAXOxQ+SU1rCX3JOxmkG5daJD6mDGkfUeg01/SROwDvL2QHM/1XhlYBYYX -Ir7dUKy3rGnkIcScoUR6t7BnWSzZSoIR49HhQyfbjnDxpC2bQrwqcXiHxFhyz/wA -eDTs3xO3Z3lv2jUAw0Fu5hLozZZu2RuxNiha/3hg6o2eCwpyOmldAIdmk2G2hg81 -Q80AEQEAAYkCPAQYAQoAJhYhBOx8XqssNAmmTzu+biH+kjIrqeBnBQJaqqGiAhsM -BQkDwmcAAAoJECH+kjIrqeBnQ60P/RZyubnCRRC43JyzUtetS0EUIfp5XNg7UFly -fyrduUxTN1A7OdPT4kSOhMtegJnSYLnaSHGpYzXGdrp3nCDk08IFZmIQ7kx/1JNb -KDgVbH+9Lu8iK5FQJI5xwwefpgzRr4mgwxdLsa6joBikMWIhODN4DY8Lh7IXn+cO -FJp5Ba+Npp0fJ6BEjTDxisabYNuOGpPOaotY5QpB8IKJTazrYcTZIXpUEhBSspbP -WOZnEFwMO3xHxMnV47tIoyaojbfwUb/yRwjkxdqByuzRiFxWN0SjM6sevqbjTKiQ -uEhXMVzt12V3BsYJ+HIBzehwK8yUDEfHjcZuyXZ/C9ydNkB1NwxmOVZOODO0CChy -cyFS6jPeiPB3Mm5oU1Q5lUrt6etsqPhEc6KFyS/7urXeEF+MwdwFrwcNEJKRn9R5 -MXS8Op0XKLAuPk0bCUT+jjKfvFECinVwIKJJolbHDYaASIDnuQxn1p2pGMmdtJQM -tHF2TbjwuRqzIOfZvfLtb95PDqyjdUh7G2u5NpB2miRgQI4+6pcvcS2KSpN3Xta2 -2yYqBvK8a4CvSZcgjebAD5SIJSbwV4d8NLW6IdD344okN/dstpIswcKEFU/ikS3P -BvsJ8GJ/S91qoWNQGtnNwqh4holVvBn+jFxhroiwsh4bXNt47tE00lEOUYoOkCNO -pTtqq53+ -=ITP3 +PQIbAwUJA8JnAAIeAQIXgBYhBCurRF+5tPDTMOR8sLIF5purL9kiBQJeaKikBQsJ +CAcDBBUKCQgFFgMCAQAACgkQsgXmm6sv2SLhXxAAkAfk7pCMuYbJ0j1LHxgaRTfv +S3uBCfpugnb5h+it7Pb4zSbeR3A//Z9syJHmQ/mKDyiaYXkyFj2gmmEAxxfknpy4 +wFraHOM7NXSbqaciIMxkN16x95dX6A/xC+HavBFK5xvMX8+iGYgE+lNo+b3PzCo0 +a0uUzIDT8Kmsr5kgzcbDjxqHpgYLFj40utfsKaq3xANx8mOOn/xKL3OtsLKRQwty +51ZkqsrKm9UB6vNgveVo2ZZOlLUQCakQyQJv7HZDncsp8D3Jug9TAK0ef7g8Kq// +YVHXmjyvx3ADovSsSoAfxDaqjHL2GQkQ156rVW1B0gbmYVCkXzdsQCpTVS4Pyw98 +pZLa4BxSHRFTBjqZsbpfrGG0VpQPt1o08mMkWDAe/NJ6BAge6v9PULsRLLvdkJYz +xRGE76trdE22bgVl5r5a+eQP2VvBWXrM60lfy1sML3jUVKlQ+PGBex9nd56s/KcQ +w4tYBAMraUFe/md/F5Uzh2jARhUgFX8UwATZlS1rtpEoYZE7D6mojTCevBnSbA3R +p4F7G71tioRKwBKcxwKAWxc+KdsKGK2F3ITfqdgTT1MN0w+5Etcyfg1OWT4M3jhN +9DPSIKxu+6r0bmM33m5gzv7IclKkXOH5tUwF7Robc7yXi0GXVWsZ3MVkVjEtKwdN +SalgOFMETUVepEGL2ZuJAjMEEAEKAB0WIQTsfF6rLDQJpk87vm4h/pIyK6ngZwUC +XmeDwQAKCRAh/pIyK6ngZ4KQD/9lbsVIrtSoVPqC2yldRF7g/V+FCIOJIriwvE7B +POJmI5lWLHajaWVAa+4tpNFq810tc3lV6EYkYt9eHvR2Qh40QlvzzUePFc2M34w4 +Yh3o+sBSPwzJO5PD0OBXq2YZziWukZvgVm1skqoegGy97ZXxAxM6LpopTGNNt/2f +JHqexe5HCd1wRurB+tZZR3zXvyEd26jHWSi8IEBXMDEtQ6c59sr2vk9lHdM9dyvP +HpV0WH7skAy3VtoZ9NvZrUX7GSajNfEefdJEZN2zE6tKzbw1JxO/0IE8WrBKrBer +QFr8nqz6uRMYJ8smZHWGMspucJpxE+TlPWNNYu6RfK9Gfebw0d8LQPvLkU6Rgdvs +DkkvuAlcWWXThx3uRGyjMcOUrpEgxSiqgmIXlfpszgwkeyguFI6vOK+e2vtQ6B+F +UOfP3l4P1S8oyXl2hp6LIv9ZJI9oSP+I+wnhDC3wLTZkq79OpIhFE9TvVsTmYBpA +7i5LZ/9c9ZcK3YQ7til3QNitJv5BNLsLX3PuE0WI+VsmUEYlVoi1taHQ9IbCoE24 +5pXExRAuh9fdbZ9Tj3alRZjHcNZqlIyC4kL50/t5f94Mr8Zi2+OLDhJjmQmCVMgm +ZY8Rifl6/NC1egJVX+8PDPQCl1yYmTlPPk+yr5kbFVTL6utqeSeb/FdJAgOzd/FR +pXkeF4kCMwQQAQoAHRYhBO4Wa86tVuA0v7M63Xv3KdXnyB+gBQJeZ4PmAAoJEHv3 +KdXnyB+gqhIP/AhLniT7IIwwABTFcRMRfsWP7kdesVAnjYdhF7mRlpAP9WH3SnQG +HWJiYatQwypO9xs0DR54QhLxv0JDahROfE1ChH0nlb4A90eRIsh6aof/ihN8U0QX +7sa7+dH0YVixJibdXq4wcVeXbljI1upaKOY4wIu95ElDlUXgqH0C+Hi79IbHWkzr +fGgLyuSrfXOaMu1Cj+cmdtftANpxAeDXyVgEqU6OyNvxyz9/LoSkpKoci10dPrSs +hdWPL6r9BbShPF/KfrIZWqePglYwEwR7RbfofyB4NmD91izfveK9fXLrknOwsP6q +Nd+lRBU23FAMBfK/8AhysCxJYkyt/zNX1D2RiykTvWhiHE/iCB2NSpGhawDSd8pY +83fJ3wAKkvoayYuTm0+uK/PIRopWHsPOQ7Kc1aTfIWomifQQMyE5EmBgbcZONas3 ++wqNBtbZSQJr/LLC+C9cz+9OxK8SivI5HMhegsGHMrqcQ6pD5q8wVujDPWmT/K3A +JuMgxlAwtSRWZyBa9/yWRxzz5NYpocxVOqrW3KUfu84aJRP4AmIkcGxMg6o+Z3vW +WLZ5+oPYnWiPl+RH7w5o934m+CAG03L7z6L0RFUbSSlb8cfiz+t16uhytCrNazbN +IEsJl7ZHzgRhKwlBZi83KQdIC9LGXdsJq7prXQU5oMdj1L+4upB/ZyFciQIzBBAB +CgAdFiEEfEr9Ydiq51cHlqUXIgnWkC+WnJUFAl5oqOEACgkQIgnWkC+WnJU/TA// +V6k62wxx5jLiC4FERj9WjoXbOzcj09AkJ65HypyOUkGlxeeRqpJSof3Jx7GfZGNt +U4WGJTY2f3KslqgjBe2KyLzrIWkQtZ74exxEw+dlgjWtvgtY8pdWWQKE4hzbi2YL +ScOLdykdDIw/cHO4KUI3RbYdDDfC3pdmKqmU1SQWpgfUMzz8mflUNIQma0ZHH4Da +WcPo7Bp3VgKaAEDotLPqEUHOPKIrAmSL+qzq/uCJbYIHWpws4UgftH4k2OLhfH5m +l1A0G0FMQ4IQ59V0nXT9zpmb21CIko4GInaCKCUbcyOdFuNKROAMpZy+6qmVazVf +scjovcgkfyCPsSXzJ7mmf8SK2les9IL5gU6nYXE0JTW9ebomUfqKK+Fi6mHC59N9 +ibdg2G5FaKvQ7dNytDPrdCgJgixmJwakGQDqn+SXepwBLprIIPy97yDSzo+M4qUb +jv4wIL8Hp3dY1pWWek4lw5/NxlzmBdZNCMXSVwumVXB/EJn3d/VjHxahaPC6/h9d +qhBclJfeBlYcVbu4UpGzcdnUVs1p9NkgdUawaeqh+cBb2Ptl+M0plTGRxHZ5Lk9L +OK6DoWX663ovTbc37VSA6SnJ4BIFYEk5JUJq4099GFQ3PIcAhcrMjU8+aEnGYU2P +n+oXjdGIvxhmHWykmsfddkzYzI5zeIElZVt2qXM415m0JVNVU0UgU2VjdXJpdHkg +VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JAlMEEwEKAD0CGwMFCQPCZwACHgECF4AW +IQQrq0RfubTw0zDkfLCyBeabqy/ZIgUCXmiooQULCQgHAwQVCgkIBRYDAgEAAAoJ +ELIF5purL9kidCMQAKVihQ8YlmWTOYIWZ3UX3w0V1pAfPlT3hWpwajgjd8/5Vau5 +clmdAG0dDh0KZbXetUMcrH9kTp0r0ri0/7Y3mvh09DkLta4IZsUS3LZ/wedhz/oz +syOMC9g7fqG4+BVB3QXgMGWruayqJq3mV0fzHlia4AYeqPcAGSnOyAt9YVxtZWUO +2qySSpfn5CmXBt+RWrfyldR9O8uTkrBS6mLU2d5amNL38j/HqDL2qw8mWnUhHx3h +2jGKL4WwtOpPQbdaaPRc8z5ouyuS+q7KY1Q/sUfbqJBf9KpjeFjACV4M6l+Re+Wa +lMmABdd7zVxpnC1ISxGEkA8a8lYrJfay1xcET3VBUwp6f8J+Qd2tIHMh7M76quYN +vehjTgQF8RTPqejJBWPbYiT+/WZrhZf7RGubUbqxaz6vTsrigbKAJpjgHZBIz9wn +Jm4zrJCw2B239YEIpOVi8OFLnuycnCMTzLj1p2l+Jxn4L4JhNGADD5KHMXL4YrUe +OZPfVWOAtAq7pZ3RDsea0NqxkeJg0VrywJ3Dto/wUcwAttspnOZeDAUMmVo/D8IJ +C3ubkYDJFqgwvnfE9sS3lXXBqmEvr/58jMgWw0b2DM4S4J3mecRHCtywNY8Q9acQ +1L9VA2wm6sMwhp86k89FMQhkiyBgXgceQpsuD+V17+peXfsXOgZHTrou0mB0iQIz +BBABCgAdFiEE7Hxeqyw0CaZPO75uIf6SMiup4GcFAl5ng6YACgkQIf6SMiup4GcP +gRAAskHJkdz7iEL7JqJ9MAXYGF2jpbmNKGc9XY33xOgiLVy5HtG8gcbIU2fU6U/M +Gu8g03vrhaYapwy7D4MvX3innhgciAxDDo+yF8gnDflMfYf0uVEWSo/UGqznEO7G +FerASFzRFXbvAgTbBTLTjQli3wYCvdlaEJtAuH8DBnh2GmVy+fTrDKXwyhUgFWbm +LvNLyE85sDhbcHpBSWxA0/Dk9ZwQTRRZO0kryIoWY6X+iJosQlaZSVy5CHkBZls9 +2EXm+6R64RmDeuUrN8p9dBZhvLT591/8TM9fTiwkHevZ5f4uYUWzSlLv9jcVH3M5 +saikcwzCZ2MUNYRQLim9YGCgGh9979wU62XuNXyaNgv5IRpCvNIElp1f+ozUEVoc +clWNy4MMIBIaDvpu2iEKrv8f6NZmjoIRKD8Wm4OdFZ/1r/hWU4esJjy1WVwLGDgc +nx3wv/PxfV6amO2LAfNNPHZFcOpO9SrH5XDXp7WsWP4JZIZC8QH9ksBU2eiZMVpz +sAh0+wkyn5j/cmgB1lNRuxVnPRYROVlyeLcI+YjqX0FT4YBe6QIHCTWowKAq9gr4 +n2bzw7WweiddyDb+uWLF86t37c86he/GPGnFmWdQxSzliQLGad0k4xil0TYNulfs +1IjYALwTD87Oqz/sGnCfIKiiZl3OxrWSZjrvuY5vxcdIAV2JAjMEEAEKAB0WIQTu +FmvOrVbgNL+zOt179ynV58gfoAUCXmeD4AAKCRB79ynV58gfoB3nD/0TmwqC8C8t +ic1PIMDJLDkzVa5q+Vkma6VsTPgWRmZb8O6Al+v280qeyVYo6y98ZEbRS1VTS3gt +oDDgZo35f37fdr0tUHB0P5JC3NQVKuVHcThulFSIQ4IYqARMd9EuRIG4EJDF5+eR +t3CQ8ePhblGR1EOk1Rfa9WmP/WSFK/dv4/SkpwVOv8BpZArgYt6WfSOBrfm0Co+B +vSZ6RzUGo7qNTLqff4TerMlR3EFXEEC6Hc+HbvI4vA+QY1s0rM1a49cybi98OgaE +3UBj354EzNROV9cAmGmqcnF3aE5B+a5iyHVXhApgomhFVEFjsEL71OT78Ebt+6dW +O5dKnbfrIebwU6q0y/hCl8bGI6ROFVsnWMNcOJWtGOZ7awN9L3ZWHofABuAD2lTb ++Okn2hg1riFX1zxt3GK39q6NGz8Zvp5jPLDFCdiFJayYaoPyVWrs9s7PXMWU2m3k +w4vxMGfSWG1oJMVTPY6KYNSu7b//FxiC1zzqRPsI9HVHp+IfpnSsVXCZ0SxgPdSR +T+lnFNRbwoU+JXO2eGCzVkOKNIIdWf5ftIpZR0uUf8kWAX0MM7cEUnlcObpBEEiQ +E3UTpGUGKDBJYKzcMOkF8gECTLz9JfpMFikxbKSxU7NHwUBEIkHxdPnt4olWW+8w +Iy537TsElk2A3VgomVHUoRMy0OtPIwCCjIkCMwQQAQoAHRYhBHxK/WHYqudXB5al +FyIJ1pAvlpyVBQJeaKjjAAoJECIJ1pAvlpyVrqYQAI3P6J8zC8Iqxg/zyTQ80hHU +SaJCUxTnrhJZYH4IqgsKMBr0YwGwSvD5TKlausFNHzXzFyP63QzTZuvbYI50o3zK +2mYxYQNH+QK49qqOZsO8osYDbSHv4Uercqc+gJAyAjnkio48ODca/auXlmd95y/7 +g/WQ9mfpO5lDZShzDzrifum2CAEHYC/I1TDKNZJUgU7b3A8QA2eWO7zl4vHlD4JF +QCKuti47gHNrnOdZON3YTbXuzPRbAwA/gA3kK5Id+BzSNpeC0xvrN+ppitV4Blo7 +vKs9hKG1p0wiwLL4HZTltet/5EjWT0yKcJejesKZGa6ItwrQZcWEZhTvj/T52Ffr +n/g+vz9NUL4EcF5FdxFJrJDkc6B9uu2nyHammgvD1+rT3sBA1N9OxSZ1SL+h/t6Y +cwS+L0G/FH2dy1XoG/BlKi1z2hLOlQTq+UboHWdKg3mGOWEXDInZedRjXHNtEw9S +dxsb3z+ahDgsoe8+DlF53XM32QZqjL4nrIlJe5jVJk+HdTRK+q2HAlp+6SrCgDpN +Igk2HPBfQB33BBjLIHkxoelkZK6Sao18SHk/uw8d9nCIax6/CQzj6RK7qeK4XCtM +OEK63IlMHlAv7Kwk76CPRVpmxcHVg7DGTZIJ4fz3I8XwL0GkGhkVAGvpNHUNnECX +jNHbjdeQ5qHTWEtBk2G8uQINBF5ngbYBEADnTxz05oMoMbJ89JGGTZ1IaRtF0Puy +pxx4m0hEKLF4xLc+Dpav3kgvXurvfRyk/fzRcwcxvD6B2ifUiGxBWCoCQDlPjHzC +2zn3tX2BEXVuam/HnoCv+vwEvj8W4FldwsYK/NDyog+KLK5FyA2DEP7kcqf3BQKJ +R6oQYWlxL/TNFbdswOUf/N2n7cYh7Bp+H3ZRTkhoAqMyoaWuSOE8PlplhVE03LWo +uW7JoXpLfB7/sIBWh+dfyLqJa4HBk7fh+j6hy8WzwhAbUJ/bQBIuAmXEEyK149bl +Xa6CLDwnDFDbnmjPeCFkMplwTp41BZksUog4HvLvzvHWkEl663YB1ddmgg4A2DOM +DlaICclppcTf1k3l2Igjc5vZcj/31q1QirWTOmA06D9NPy5sYmyx96cAIP2Wgw+Q +igHC21F4/XiA9CccKWihvT59rgJKO9mNsBdNZAMBEfU3R4W1yZl2GJYxCrvNHC7m +OQA4gXXazvwnGnhTJckh2aE5nAcD4KeCVPyqnSdKRedvvMED+yA7+2CMudbHMTPx +5KwMky8uiDb7m9fOumoQG/xs+0MNPMCrIlcl6wNHoZZZQUSrRvEAnXdzDpDMzj9u +AWCIio8LJW8cxrqsFUsZR3X+2N0GaPouvTf5ooPDiIWKdebKUgyl7q7gEcxsTWZq +gXpBa5e6ypU6nQARAQABiQI8BBgBCgAmFiEEK6tEX7m08NMw5HywsgXmm6sv2SIF +Al5ngbYCGwwFCQPCZwAACgkQsgXmm6sv2SJPKw//c4bJE2tRANfr8rNjceh6M1xq +U/Q2M5MQs9FfAM60RxKSnHmdDsaMOy7IoBEIlG3l70Wh/B3s8w8tWWVEJtcF56jl +gUPlDIF8+fQixw9G8wNbUdhuW01QXAuzcG4N5BfJULMzIwWKaWDYLGEaMPu3g5Ox +acAwFfb4P0oN2McY1XzFEK8am9Oc578sK9U4Ab9AJaEgdMs2E/HgBtr4UR6i4lhw +N7vSzfdwsVllZaJlUxlI6pT+qrizVX/rORGf7dNIOeqxJ2eWbvfsblw/j/667HeC +Bz9sdLwG7gsFNMHFPJavEIMaqpV+Msgc7zFRxLNp5F0elBVyLSeLrr9lP6DpZOQP +A3MA6fT0gXW4DkDYL8vozyosa4/ywZsk4CNTnDXSxv6SSPsY2X0UVRA7ZxTJRgYd +juTCG3AVnrdmRyEN9bRDZXk+EUbS6bYYa+eMD81AeuW5C2XfJkhPmOqMuBZDU3Fp +5kWGCLgp8fzS+arY05KGPgcxvSq2G5IjIvOvWhX+AND3UJrndCnp0xiDASvQnykc +4SwRGbZH/+4g0F7ftjkJ5o4hzNTweG6hvX1mucweP8065e0fp+SC0tDA1RxOePsE +z6ZSLwKcR1brFUX5fEz+Wrs46pqC2yYLaXttDIFSP9VeqIFxIQCC9uPmTNnIEAxM +rGOJ+4Zwj2oEGwnkm/M= +=jrJS -----END PGP PUBLIC KEY BLOCK----- diff --git a/suse-build-key.changes b/suse-build-key.changes index 59c2569..25c2727 100644 --- a/suse-build-key.changes +++ b/suse-build-key.changes @@ -1,8 +1,33 @@ ------------------------------------------------------------------- -Fri Jan 11 15:00:10 UTC 2019 - meissner@suse.com +Mon Sep 21 08:30:03 UTC 2020 - Marcus Meissner -- add PTF key to the key directory, so it does not get stripped - out when using --exclude-docs (bsc#1044232) +- suse build key extended (bsc#1176759) + gpg-pubkey-39db7c82-5847eb1f.asc -> gpg-pubkey-39db7c82-5f68629b.asc + + +------------------------------------------------------------------- +Thu Aug 13 09:32:26 UTC 2020 - Marcus Meissner + +- actually the container key is different from the build signing + key. (PM-1845 bsc#1170347) + +------------------------------------------------------------------- +Thu Apr 23 13:32:45 UTC 2020 - Marcus Meissner + +- add a /usr/share/container-keys/ directory for GPG based Container + verification. +- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347) + +------------------------------------------------------------------- +Wed Mar 11 09:09:42 UTC 2020 - Marcus Meissner + +- created a new security@suse.de communication key (bsc#1166334) + +------------------------------------------------------------------- +Tue Nov 13 12:41:24 UTC 2018 - meissner@suse.com + +- include ptf key in the key directory to avoid it being + stripped via %doc stripping. (bsc#1044232) ------------------------------------------------------------------- Wed Mar 28 14:56:15 UTC 2018 - meissner@suse.com diff --git a/suse-build-key.spec b/suse-build-key.spec index a5d78ba..73cebaa 100644 --- a/suse-build-key.spec +++ b/suse-build-key.spec @@ -1,7 +1,7 @@ # # spec file for package suse-build-key # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # @@ -22,14 +22,14 @@ Provides: build-key Requires: gpg AutoReqProv: off Summary: The public gpg key for rpm package signature verification -License: GPL-2.0+ +License: GPL-2.0-or-later Group: System/Packages Version: 12.0 Release: 0 # pub 2048R/39DB7C82 2013-01-31 SuSE Package Signing Key # The main package signing key. -Source0: gpg-pubkey-39db7c82-5847eb1f.asc +Source0: gpg-pubkey-39db7c82-5f68629b.asc # pub 2048R/50A3DD1C 2013-01-14 SuSE Package Signing Key (reserve key) # Fallback key if main key gets lost. @@ -39,16 +39,22 @@ Source1: gpg-pubkey-50a3dd1c-50f35137.asc # SLES 10 key. Source2: gpg-pubkey-307e3d54-5aaa90a5.asc +#pub rsa2048/0x8EFE1BC4D4ADE9C3 2017-12-11 [SC] [expires: 2027-12-09] +# Key fingerprint = 0EE9 CA43 0050 9E29 17A0 54ED 8EFE 1BC4 D4AD E9C3 +# container key used by Container TUF style signing. +Source3: build-container-d4ade9c3-5a2e9669.asc + # pub 1024D/B37B98A9 2005-05-11 SUSE PTF Signing Key # SUSE supplied PTF (program temporary fixes) are signed by this key. # supplied to be not imported by default Source98: suse_ptf_key.asc -#pub rsa4096/0x21FE92322BA9E067 2018-03-15 [SC] [expires: 2020-03-14] -# Key fingerprint = EC7C 5EAB 2C34 09A6 4F3B BE6E 21FE 9232 2BA9 E067 -#uid SUSE Security Team -#uid SUSE Security Team -#sub rsa4096/0xFF97314EC1E11A0E 2018-03-15 [E] [expires: 2020-03-14] +#pub rsa4096/0xB205E69BAB2FD922 2020-03-10 [SC] [expires: 2022-03-10] +#Key fingerprint = 2BAB 445F B9B4 F0D3 30E4 7CB0 B205 E69B AB2F D922 +#uid [ full ] SUSE Security Team +#uid [ full ] SUSE Security Team +#sub rsa4096/0xA679ED66FD417627 2020-03-10 [E] [expires: 2022-03-10] +# Key fingerprint = DB30 DF8E 6E44 CFF8 25E8 C858 A679 ED66 FD41 7627 # Only used for email communication Source99: security_at_suse_de.asc @@ -57,15 +63,17 @@ Source100: dumpsigs BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildArch: noarch %define keydir %{_prefix}/lib/rpm/gnupg/keys -PreReq: sh-utils gpg fileutils mktemp +%define containerkeydir %{_prefix}/share/container-keys/ +PreReq: fileutils +PreReq: gpg +PreReq: mktemp +PreReq: sh-utils %description This package contains the gpg keys that are used to sign the SUSE rpm packages. The keys installed here are not actually used by anything. rpm/zypper use the keys in the rpm db instead. - - %prep %setup -qcT @@ -85,15 +93,20 @@ for i in %sources; do done install -m 755 %{SOURCE100} $RPM_BUILD_ROOT/usr/lib/rpm/gnupg +install -d -m 755 $RPM_BUILD_ROOT%{containerkeydir}/ +install -c -m 644 %{SOURCE3} $RPM_BUILD_ROOT%{containerkeydir}/suse-container-key.asc + %files %defattr(644,root,root) %doc security_at_suse_de.asc %attr(755,root,root) %dir %{_prefix}/lib/rpm/gnupg %attr(755,root,root) %dir %{keydir} +%attr(755,root,root) %dir %{containerkeydir} %attr(755,root,root) %{_prefix}/lib/rpm/gnupg/dumpsigs %{keydir}/gpg-pubkey-50a3dd1c-50f35137.asc -%{keydir}/gpg-pubkey-39db7c82-5847eb1f.asc +%{keydir}/gpg-pubkey-39db7c82-5f68629b.asc %{keydir}/gpg-pubkey-307e3d54-5aaa90a5.asc %{keydir}/suse_ptf_key.asc +%{containerkeydir}/suse-container-key.asc %changelog