Commit Graph

33 Commits

Author SHA256 Message Date
3f1fb134bc Accepting request 1156875 from home:msmeissn:branches:Base:System
- switch the container key to the new 4096RSA key by default
- obsolete the 1024bit RSA key from SLES 11, so it gets deinstalled
  from migrated systems.

OBS-URL: https://build.opensuse.org/request/show/1156875
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=43
2024-03-11 08:46:23 +00:00
931203ed7d OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=41 2023-10-16 09:09:15 +00:00
0ad368c28a - build-container-d4ade9c3-5a2e9669.pem: added missing current
PEM container key.
- install the PEM files to the container dir, not the .asc files
  (bsc#1216203)

OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=40
2023-10-16 08:55:58 +00:00
5ffb60440b Accepting request 1110631 from home:msmeissn:branches:Base:System
- remove gpg, fileutils, mktemp, sh-utils requires as they are not
  needed by the package main functionality, but only by dumpsigs.

OBS-URL: https://build.opensuse.org/request/show/1110631
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=38
2023-09-12 13:52:12 +00:00
9930cab96c Accepting request 1088284 from home:msmeissn:branches:Base:System
- updated with all current changes
  - gpg-pubkey-3fa1d6ce-63c9481c.asc: Upcoming SLE RSA 4096 bit signing key.
  - gpg-pubkey-25db7ae0-645bae34.asc: New SLE RSA 4096 bit backup signing key. 
  - gpg-pubkey-09d9ea69-645b99ce.asc: New ALP RSA 4096 bit signing key.
  - gpg-pubkey-73f03759-626bd414.asc: New ALP RSA 4096 bit backup signing key.
  - suse_ptf_key.asc: switch to use current RSA 2048 bit key
  - suse_ptf_4096_key.asc: upcoming RSA 4096 bit key for SUSE PTFs.
  - build-container-8fd6c337-63c94b45.asc: New SLE RSA 4096 bit container signing key (GPG format).
  - build-container-8fd6c337-63c94b45.pem: New SLE RSA 4096 bit container signing key (PEM format).

OBS-URL: https://build.opensuse.org/request/show/1088284
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=36
2023-05-22 08:23:04 +00:00
315f88bca8 Accepting request 903938 from home:dirkmueller:branches:Base:System
- remove dumpsigs for SLE12+ (rpm 4.x) (bsc#1186827)

OBS-URL: https://build.opensuse.org/request/show/903938
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=35
2021-07-05 10:30:11 +00:00
149e29660e Accepting request 899537 from home:dirkmueller:Factory
This syncs from SUSE:SLE-15:Update. the slightly non-incremental
changelog can't be avoided. 

- suse build key extended (bsc#1176759)
  gpg-pubkey-39db7c82-5847eb1f.asc -> gpg-pubkey-39db7c82-5f68629b.asc

- actually the container key is different from the build signing
  key. (PM-1845 bsc#1170347)

- add a /usr/share/container-keys/ directory for GPG based Container
  verification.
- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347)

- created a new security@suse.de communication key (bsc#1166334)

- include ptf key in the key directory to avoid it being
  stripped via %doc stripping. (bsc#1044232)

OBS-URL: https://build.opensuse.org/request/show/899537
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=33
2021-06-14 07:37:37 +00:00
eb8ac1146f OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=31 2019-01-14 07:42:42 +00:00
0071f620da - add PTF key to the key directory, so it does not get stripped
out when using --exclude-docs (bsc#1044232)

OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=30
2019-01-11 15:00:54 +00:00
1e67db81c4 Accepting request 621179 from SUSE:SLE-15:GA
boo#1100253

OBS-URL: https://build.opensuse.org/request/show/621179
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=28
2018-07-09 16:37:53 +00:00
be84b3b4d8 Accepting request 518537 from home:msmeissn:branches:Base:System
- extend the build@suse.de product key. (bsc#1014151)
  pub  2048R/39DB7C82 2013-01-31 [expires: 2020-12-06]
  uid                            SuSE Package Signing Key <build@suse.de>

- use dumpsigs script from openSUSE to merge code 

- renamed security_at_suse_de.asc to security_at_suse_de_old.asc
- security_at_suse_de.asc: new 4096 bit RSA key.
  pub  4096R/317CD502 2014-10-02 SUSE Security Team <security@suse.de>
  bnc#899509

- create suse-build-key.gpg during build.
- Remove old keys from keyring. (fate#314767)
  Keys currently inside the RPM trusted keyring:
  - pub  2048R/39DB7C82 SuSE Package Signing Key <build@suse.de>
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de>
- Various keys are moved to the documentation area
  (/usr/share/doc/packages/suse-build-key)
  - build-at-suse-sle11.asc: the old SUSE Linux Enterprise 11 key.
    if SUSE Linux Enterprise 11 packages need to be verified on
    a SUSE Linux Enterprise 12 system.
  - suse_ptf_key.asc: The suse ptf key. For verification of provided PTFs.
  - security_at_suse_de.asc: Use only for email encryption and
    verification purposes when contacting our security contact address
    security@suse.de

OBS-URL: https://build.opensuse.org/request/show/518537
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=26
2017-08-24 13:29:11 +00:00
9984bb2da5 OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=23 2014-08-29 08:32:52 +00:00
5943f5704b OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=22 2014-08-29 08:32:09 +00:00
8583c81b44 - Went to new method again.
- suse-build-key.gpg blob dropped
  - ship seperate files

OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=20
2014-08-29 08:29:05 +00:00
516178d13b OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=14 2014-01-13 15:16:35 +00:00
c53bf12c98 OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=13 2014-01-13 15:08:11 +00:00
307a744aa2 - temporary readd the old SLE11 1024bit build@suse.de key
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=11
2014-01-13 14:54:37 +00:00
4f52763dd1 Accepting request 213302 from home:msmeissn:branches:Base:System
- Merged over logic from openSUSE-build-key.
- Got rid of default importing into roots keyring.
- Removed some old keys.
- Clarify that security@suse.de is a email only key
- PTF key is supplied also as %doc, to not be default
  imported.
- Keys currently inside:
  - pub  2048R/39DB7C82 SuSE Package Signing Key <build@suse.de>
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de>
  - pub  1024D/B37B98A9 SUSE PTF Signing Key <support@suse.com>
  - pub  2048R/3D25D3D9 SuSE Security Team <security@suse.de>

OBS-URL: https://build.opensuse.org/request/show/213302
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=9
2014-01-09 13:49:26 +00:00
Ruediger Oertel
8016e44ace - export keys to single files in /usr/lib/rpm/gnupg/keys
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=7
2013-09-20 13:24:41 +00:00
e2128eac85 Accepting request 199377 from home:oertel:branches:Base:System
- added future signing key for SLES (fate#314767) (bnc#801055)
  using 2048 bit rsa key 

- added reserve key for SLES (fate#312896)
  50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de>
  valid until (2017-01-13) 

- reduced key list. remaining keys:
  307E3D54 SuSE Package Signing Key <build@suse.de>
  3D25D3D9 SuSE Security Team <security@suse.de>
  9C800ACA SuSE Package Signing Key <build@suse.de>
  B37B98A9 SUSE PTF Signing Key <support@suse.com> 

- if we have to set $HOME, we also have to export the variable
  (bnc#665912)

OBS-URL: https://build.opensuse.org/request/show/199377
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=6
2013-09-20 12:28:04 +00:00
Stephan Kulow
cd81c90541 Accepting request 138962 from Base:System
- export keys to single files in /usr/lib/rpm/gnupg/keys (forwarded request 138949 from oertel)

OBS-URL: https://build.opensuse.org/request/show/138962
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=27
2012-10-22 20:10:31 +00:00
Stephan Kulow
77bc47c86d replace license with spdx.org variant
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=25
2011-12-06 18:06:20 +00:00
OBS User autobuild
dcc29a3571 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=20 2010-05-04 17:33:55 +00:00
OBS User autobuild
52f569d2f2 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=19 2010-05-04 16:32:23 +00:00
OBS User unknown
64e7d6aac0 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=16 2008-11-03 13:25:56 +00:00
OBS User unknown
421f6ef46d OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=12 2008-09-20 02:50:09 +00:00
058a21cab2 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=9 2008-09-19 07:37:16 +00:00
OBS User unknown
289a39cbc6 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=8 2008-09-19 02:47:39 +00:00
8c342bcad1 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=7 2008-09-18 10:13:28 +00:00
OBS User unknown
a510478f75 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=4 2008-06-02 23:03:07 +00:00
OBS User unknown
7b3c69bd4a OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=3 2008-05-05 16:37:24 +00:00
OBS User unknown
ca906b63d6 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=2 2007-03-20 23:36:23 +00:00
OBS User unknown
639eed6be9 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=1 2007-01-15 23:38:18 +00:00