Commit Graph

58 Commits

Author SHA256 Message Date
Ana Guerrero
f63a30c4cb Accepting request 1156876 from Base:System
- switch the container key to the new 4096RSA key by default
- obsolete the 1024bit RSA key from SLES 11, so it gets deinstalled
  from migrated systems. (forwarded request 1156875 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/1156876
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=43
2024-03-11 14:34:43 +00:00
3f1fb134bc Accepting request 1156875 from home:msmeissn:branches:Base:System
- switch the container key to the new 4096RSA key by default
- obsolete the 1024bit RSA key from SLES 11, so it gets deinstalled
  from migrated systems.

OBS-URL: https://build.opensuse.org/request/show/1156875
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=43
2024-03-11 08:46:23 +00:00
Ana Guerrero
5a57e46f31 Accepting request 1117951 from Base:System
- build-container-d4ade9c3-5a2e9669.pem: added missing current
  PEM container key.
- install the PEM files to the container dir, not the .asc files
  (bsc#1216203)

OBS-URL: https://build.opensuse.org/request/show/1117951
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=42
2023-10-16 20:33:23 +00:00
931203ed7d OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=41 2023-10-16 09:09:15 +00:00
0ad368c28a - build-container-d4ade9c3-5a2e9669.pem: added missing current
PEM container key.
- install the PEM files to the container dir, not the .asc files
  (bsc#1216203)

OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=40
2023-10-16 08:55:58 +00:00
Ana Guerrero
2ab82c65e3 Accepting request 1110632 from Base:System
- remove gpg, fileutils, mktemp, sh-utils requires as they are not
  needed by the package main functionality, but only by dumpsigs. (forwarded request 1110631 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/1110632
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=41
2023-09-12 19:04:26 +00:00
5ffb60440b Accepting request 1110631 from home:msmeissn:branches:Base:System
- remove gpg, fileutils, mktemp, sh-utils requires as they are not
  needed by the package main functionality, but only by dumpsigs.

OBS-URL: https://build.opensuse.org/request/show/1110631
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=38
2023-09-12 13:52:12 +00:00
Dominique Leuenberger
178cd332f5 Accepting request 1088291 from Base:System
- updated with all current changes
  - gpg-pubkey-3fa1d6ce-63c9481c.asc: Upcoming SLE RSA 4096 bit signing key.
  - gpg-pubkey-25db7ae0-645bae34.asc: New SLE RSA 4096 bit backup signing key. 
  - gpg-pubkey-09d9ea69-645b99ce.asc: New ALP RSA 4096 bit signing key.
  - gpg-pubkey-73f03759-626bd414.asc: New ALP RSA 4096 bit backup signing key.
  - suse_ptf_key.asc: switch to use current RSA 2048 bit key
  - suse_ptf_4096_key.asc: upcoming RSA 4096 bit key for SUSE PTFs.
  - build-container-8fd6c337-63c94b45.asc: New SLE RSA 4096 bit container signing key (GPG format).
  - build-container-8fd6c337-63c94b45.pem: New SLE RSA 4096 bit container signing key (PEM format). (forwarded request 1088284 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/1088291
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=40
2023-05-22 11:14:35 +00:00
9930cab96c Accepting request 1088284 from home:msmeissn:branches:Base:System
- updated with all current changes
  - gpg-pubkey-3fa1d6ce-63c9481c.asc: Upcoming SLE RSA 4096 bit signing key.
  - gpg-pubkey-25db7ae0-645bae34.asc: New SLE RSA 4096 bit backup signing key. 
  - gpg-pubkey-09d9ea69-645b99ce.asc: New ALP RSA 4096 bit signing key.
  - gpg-pubkey-73f03759-626bd414.asc: New ALP RSA 4096 bit backup signing key.
  - suse_ptf_key.asc: switch to use current RSA 2048 bit key
  - suse_ptf_4096_key.asc: upcoming RSA 4096 bit key for SUSE PTFs.
  - build-container-8fd6c337-63c94b45.asc: New SLE RSA 4096 bit container signing key (GPG format).
  - build-container-8fd6c337-63c94b45.pem: New SLE RSA 4096 bit container signing key (PEM format).

OBS-URL: https://build.opensuse.org/request/show/1088284
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=36
2023-05-22 08:23:04 +00:00
Dominique Leuenberger
db6193ae82 Accepting request 904142 from Base:System
- remove dumpsigs for SLE12+ (rpm 4.x) (bsc#1186827) (forwarded request 903938 from dirkmueller)

OBS-URL: https://build.opensuse.org/request/show/904142
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=39
2021-07-05 20:23:19 +00:00
315f88bca8 Accepting request 903938 from home:dirkmueller:branches:Base:System
- remove dumpsigs for SLE12+ (rpm 4.x) (bsc#1186827)

OBS-URL: https://build.opensuse.org/request/show/903938
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=35
2021-07-05 10:30:11 +00:00
Dominique Leuenberger
3b446a2ece Accepting request 899890 from Base:System
This syncs from SUSE:SLE-15:Update. the slightly non-incremental
changelog can't be avoided. 

- suse build key extended (bsc#1176759)
  gpg-pubkey-39db7c82-5847eb1f.asc -> gpg-pubkey-39db7c82-5f68629b.asc

- actually the container key is different from the build signing
  key. (PM-1845 bsc#1170347)

- add a /usr/share/container-keys/ directory for GPG based Container
  verification.
- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347)

- created a new security@suse.de communication key (bsc#1166334)

- include ptf key in the key directory to avoid it being
  stripped via %doc stripping. (bsc#1044232) (forwarded request 899537 from dirkmueller)

OBS-URL: https://build.opensuse.org/request/show/899890
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=38
2021-06-14 21:11:09 +00:00
149e29660e Accepting request 899537 from home:dirkmueller:Factory
This syncs from SUSE:SLE-15:Update. the slightly non-incremental
changelog can't be avoided. 

- suse build key extended (bsc#1176759)
  gpg-pubkey-39db7c82-5847eb1f.asc -> gpg-pubkey-39db7c82-5f68629b.asc

- actually the container key is different from the build signing
  key. (PM-1845 bsc#1170347)

- add a /usr/share/container-keys/ directory for GPG based Container
  verification.
- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347)

- created a new security@suse.de communication key (bsc#1166334)

- include ptf key in the key directory to avoid it being
  stripped via %doc stripping. (bsc#1044232)

OBS-URL: https://build.opensuse.org/request/show/899537
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=33
2021-06-14 07:37:37 +00:00
Dominique Leuenberger
bc65792f7a Accepting request 669010 from Base:System
- add PTF key to the key directory, so it does not get stripped 
  out when using --exclude-docs (bsc#1044232)

OBS-URL: https://build.opensuse.org/request/show/669010
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=37
2019-01-28 19:49:42 +00:00
eb8ac1146f OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=31 2019-01-14 07:42:42 +00:00
0071f620da - add PTF key to the key directory, so it does not get stripped
out when using --exclude-docs (bsc#1044232)

OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=30
2019-01-11 15:00:54 +00:00
Dominique Leuenberger
ee6c1bbd32 Accepting request 621749 from Base:System
OBS-URL: https://build.opensuse.org/request/show/621749
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=36
2018-07-10 14:16:45 +00:00
1e67db81c4 Accepting request 621179 from SUSE:SLE-15:GA
boo#1100253

OBS-URL: https://build.opensuse.org/request/show/621179
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=28
2018-07-09 16:37:53 +00:00
Dominique Leuenberger
ab56a56522 Accepting request 518538 from Base:System
- extend the build@suse.de product key. (bsc#1014151)
  pub  2048R/39DB7C82 2013-01-31 [expires: 2020-12-06]
  uid                            SuSE Package Signing Key <build@suse.de>

- use dumpsigs script from openSUSE to merge code 

- renamed security_at_suse_de.asc to security_at_suse_de_old.asc
- security_at_suse_de.asc: new 4096 bit RSA key.
  pub  4096R/317CD502 2014-10-02 SUSE Security Team <security@suse.de>
  bnc#899509

- create suse-build-key.gpg during build.
- Remove old keys from keyring. (fate#314767)
  Keys currently inside the RPM trusted keyring:
  - pub  2048R/39DB7C82 SuSE Package Signing Key <build@suse.de>
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de>
- Various keys are moved to the documentation area
  (/usr/share/doc/packages/suse-build-key)
  - build-at-suse-sle11.asc: the old SUSE Linux Enterprise 11 key.
    if SUSE Linux Enterprise 11 packages need to be verified on
    a SUSE Linux Enterprise 12 system.
  - suse_ptf_key.asc: The suse ptf key. For verification of provided PTFs.
  - security_at_suse_de.asc: Use only for email encryption and
    verification purposes when contacting our security contact address
    security@suse.de (forwarded request 518537 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/518538
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=35
2017-08-24 16:56:44 +00:00
be84b3b4d8 Accepting request 518537 from home:msmeissn:branches:Base:System
- extend the build@suse.de product key. (bsc#1014151)
  pub  2048R/39DB7C82 2013-01-31 [expires: 2020-12-06]
  uid                            SuSE Package Signing Key <build@suse.de>

- use dumpsigs script from openSUSE to merge code 

- renamed security_at_suse_de.asc to security_at_suse_de_old.asc
- security_at_suse_de.asc: new 4096 bit RSA key.
  pub  4096R/317CD502 2014-10-02 SUSE Security Team <security@suse.de>
  bnc#899509

- create suse-build-key.gpg during build.
- Remove old keys from keyring. (fate#314767)
  Keys currently inside the RPM trusted keyring:
  - pub  2048R/39DB7C82 SuSE Package Signing Key <build@suse.de>
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de>
- Various keys are moved to the documentation area
  (/usr/share/doc/packages/suse-build-key)
  - build-at-suse-sle11.asc: the old SUSE Linux Enterprise 11 key.
    if SUSE Linux Enterprise 11 packages need to be verified on
    a SUSE Linux Enterprise 12 system.
  - suse_ptf_key.asc: The suse ptf key. For verification of provided PTFs.
  - security_at_suse_de.asc: Use only for email encryption and
    verification purposes when contacting our security contact address
    security@suse.de

OBS-URL: https://build.opensuse.org/request/show/518537
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=26
2017-08-24 13:29:11 +00:00
Stephan Kulow
3e0caa582d Accepting request 247206 from Base:System
- Went to new method again.
  - suse-build-key.gpg blob dropped
  - ship seperate files

OBS-URL: https://build.opensuse.org/request/show/247206
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=34
2014-09-03 16:23:10 +00:00
eb50411aa2 OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=24 2014-09-01 13:50:52 +00:00
9984bb2da5 OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=23 2014-08-29 08:32:52 +00:00
5943f5704b OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=22 2014-08-29 08:32:09 +00:00
3239505741 OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=21 2014-08-29 08:30:52 +00:00
8583c81b44 - Went to new method again.
- suse-build-key.gpg blob dropped
  - ship seperate files

OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=20
2014-08-29 08:29:05 +00:00
Stephan Kulow
66b7f6baa2 Accepting request 213750 from Base:System
- reverted to contain the fullkeyring build SLE12 Alpha.
- also list the old sle11 build@suse.de key temporary

OBS-URL: https://build.opensuse.org/request/show/213750
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=32
2014-01-14 12:55:19 +00:00
4e742be0a8 - also list the old sle11 build@suse.de key temporary
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=18
2014-01-13 15:20:08 +00:00
552eeb4bb4 - reverted to contain the fullkeyring build SLE12 Alpha.
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=17
2014-01-13 15:18:49 +00:00
71a27584f5 imported.
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=16
2014-01-13 15:18:31 +00:00
cfd3276293 - Got rid of default importing into roots keyring.
- Removed some old keys.
- Clarify that security@suse.de is a email only key
- PTF key is supplied also as %doc, to not be default
   imported.
- Keys currently inside:
  - pub  2048R/39DB7C82 SuSE Package Signing Key <build@suse.de>
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de>
  - pub  1024D/B37B98A9 SUSE PTF Signing Key <support@suse.com>
  - pub  2048R/3D25D3D9 SuSE Security Team <security@suse.de>

OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=15
2014-01-13 15:18:20 +00:00
516178d13b OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=14 2014-01-13 15:16:35 +00:00
c53bf12c98 OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=13 2014-01-13 15:08:11 +00:00
307a744aa2 - temporary readd the old SLE11 1024bit build@suse.de key
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=11
2014-01-13 14:54:37 +00:00
Stephan Kulow
f82daf7b2b Accepting request 213303 from Base:System
- Merged over logic from openSUSE-build-key.
- Got rid of default importing into roots keyring.
- Removed some old keys.
- Clarify that security@suse.de is a email only key
- PTF key is supplied also as %doc, to not be default
  imported.
- Keys currently inside:
  - pub  2048R/39DB7C82 SuSE Package Signing Key &lt;build@suse.de&gt;
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) &lt;build@suse.de&gt;
  - pub  1024D/B37B98A9 SUSE PTF Signing Key &lt;support@suse.com&gt;
  - pub  2048R/3D25D3D9 SuSE Security Team &lt;security@suse.de&gt; (forwarded request 213302 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/213303
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=31
2014-01-10 06:16:26 +00:00
4f52763dd1 Accepting request 213302 from home:msmeissn:branches:Base:System
- Merged over logic from openSUSE-build-key.
- Got rid of default importing into roots keyring.
- Removed some old keys.
- Clarify that security@suse.de is a email only key
- PTF key is supplied also as %doc, to not be default
  imported.
- Keys currently inside:
  - pub  2048R/39DB7C82 SuSE Package Signing Key <build@suse.de>
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de>
  - pub  1024D/B37B98A9 SUSE PTF Signing Key <support@suse.com>
  - pub  2048R/3D25D3D9 SuSE Security Team <security@suse.de>

OBS-URL: https://build.opensuse.org/request/show/213302
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=9
2014-01-09 13:49:26 +00:00
Stephan Kulow
6a2159db83 Accepting request 201136 from Base:System
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/201136
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=30
2013-09-29 17:28:59 +00:00
Ruediger Oertel
8016e44ace - export keys to single files in /usr/lib/rpm/gnupg/keys
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=7
2013-09-20 13:24:41 +00:00
e2128eac85 Accepting request 199377 from home:oertel:branches:Base:System
- added future signing key for SLES (fate#314767) (bnc#801055)
  using 2048 bit rsa key 

- added reserve key for SLES (fate#312896)
  50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de>
  valid until (2017-01-13) 

- reduced key list. remaining keys:
  307E3D54 SuSE Package Signing Key <build@suse.de>
  3D25D3D9 SuSE Security Team <security@suse.de>
  9C800ACA SuSE Package Signing Key <build@suse.de>
  B37B98A9 SUSE PTF Signing Key <support@suse.com> 

- if we have to set $HOME, we also have to export the variable
  (bnc#665912)

OBS-URL: https://build.opensuse.org/request/show/199377
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=6
2013-09-20 12:28:04 +00:00
Stephan Kulow
cd81c90541 Accepting request 138962 from Base:System
- export keys to single files in /usr/lib/rpm/gnupg/keys (forwarded request 138949 from oertel)

OBS-URL: https://build.opensuse.org/request/show/138962
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=27
2012-10-22 20:10:31 +00:00
Stephan Kulow
77bc47c86d replace license with spdx.org variant
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=25
2011-12-06 18:06:20 +00:00
OBS User autobuild
dcc29a3571 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=20 2010-05-04 17:33:55 +00:00
OBS User autobuild
52f569d2f2 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=19 2010-05-04 16:32:23 +00:00
OBS User autobuild
d9c4ca22f1 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=18 2010-03-18 15:30:50 +00:00
OBS User unknown
64e7d6aac0 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=16 2008-11-03 13:25:56 +00:00
OBS User unknown
050faea6ff OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=14 2008-09-22 14:32:23 +00:00
cc83d7a697 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=13 2008-09-22 07:38:19 +00:00
OBS User unknown
421f6ef46d OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=12 2008-09-20 02:50:09 +00:00
453fe10cd0 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=11 2008-09-19 07:41:26 +00:00
OBS User unknown
242e50b605 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=10 2008-09-19 07:37:38 +00:00