commit e389d7bea5b8d608d28054a6fabe421c8dca136d8863283b125580bbd9c35188 Author: Marcus Meissner Date: Fri Jul 19 08:47:32 2024 +0000 - make the per-project inclusion optional, default off. OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=48 diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9b03811 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..57affb6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.osc diff --git a/build-container-8fd6c337-63c94b45.asc b/build-container-8fd6c337-63c94b45.asc new file mode 100644 index 0000000..a68b6d3 --- /dev/null +++ b/build-container-8fd6c337-63c94b45.asc @@ -0,0 +1,30 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v2.0.15 (GNU/Linux) + +mQINBGPJS0UBEADF9mywsTaN5jWzA9vlYZ7wL8VYqYjGUYub1qYI12CF4CfxHO4z +yyUD5Ml58BCetScLhCf3KSNBmMfqjZ7a54AoV2A50eeVLZ3qURMHx13g7wdgMnHQ +ISTZIJsApW7Mttxs/i6D9ANz4GbyV3F9z4MactVEC3zlutJOd+A4djU9tDUkBX4H +KJtuMJm4WbDiAiQzN6LLczjAlnBuUUzhrexfZtb/oZZobPoAw6MLIA8jqyHIbnAd +kzs68knyV+FdFNmjgJzmoLQ3Kr1e7c7oOZWikhqOEdzfqR1x62Z3tMHk5JtBkIvJ +F4AXvktXvjLz3rT7jg2m1HraF3DWi8Ikx9WZTqb6T8yw3wAjJEVHp00X3BM4qLrs +6k+3JuJG58J8y8PhUR6gg3MQnK1OirZcZJz6EjG2Y86GoMocfQCzXXeyNOqqjbQi +TbffH0UV5MUPw6vtqGmqOK/lgK5+T0ChBsLEwiOsr1GRBiBbhHJyC9cYBKhvA3wQ +T46wxzIxQRH+l0K1CFNAJzWNgu3zlWF8SQLiT2zMwHx5mt1X2t78q7q+cJ5dFHnK +fY1Yo7zxTgd/ESkm/mza4UmLfv7H+/3DtSH7zrhb/017FeD8kU2y+HQqbGxuLdl6 +Bqi4vKswIfBIDcHIFnbIJ/ZW4U/JQI0Rk4c7CLShz1OBjXKimOxOd7IZowARAQAB +tDpTVVNFIExpbnV4IENvbnRhaW5lciBTaWduaW5nIEtleSA8YnVpbGQtY29udGFp +bmVyQHN1c2UuZGU+iQI+BBMBAgAoBQJjyUtFAhsDBQkHhM4ABgsJCAcDAgYVCAIJ +CgsEFgIDAQIeAQIXgAAKCRAQDOtDj9bDNxZ0EACLp/LEps4VyuRqHapwHrjwVzfB +AYbSnt+2K/RoIFlbv9rEnyYjwoTzu9RNAWs9+BORYGUjU/5wDTkSjqEqJwJWJ7DO +lxj2QwrVywTtgzEKLbudpfd6df9l2rSKF7Spvn1gEnCIYobxgyXqKataou+57RHm +wHAr5JlsGDtxCs/Kstjty3diHP61S29PBJtUEtKWVCGvlNXKRjgoOIXQ3RZeh2HQ +6InEJTxkpW5KVrlj0nmdRI+HEOLkBKPpuDsjcsXbXQPVewPTsTcHDIHw54v1QFtt +Yuq15jVzVBirCqnTrIVZXxEwftBWnQ2PB4c6jaAQ5fL+9bzvSLxsrQlWwUP3BBsd +E2vSnFu6jNWEBDHotD1QqmctDU0NUQ1hFp58JeyRZtBVYowcxMgprM6ArJkeqWb4 +vZgY9B0DXbg5wk6G1NErBATFzRR1og9pjP1qkoh6LC7z8Fun8RAhieLdJpqmpks8 +oE3zl33ia7Pvgt4FwmraW7my6LnwmbxH9GpOt5MRhb0CuM+g3Uwuhl85LjK5OBfK +x6fEfQlhno6N7CILI+FMpnvjZt05019Dk2ZZ6b4kCPm5VlOrUAsZFI+WvSL487LN +d92jxySuNKc6IIct1nXL24bUCboSbDRoZihiXYQNPc3T/AQx8iBAdpx4mMbz449O +wsnYAhoWdRww/U+ftw== +=Ux3+ +-----END PGP PUBLIC KEY BLOCK----- diff --git a/build-container-8fd6c337-63c94b45.pem b/build-container-8fd6c337-63c94b45.pem new file mode 100644 index 0000000..06fc798 --- /dev/null +++ b/build-container-8fd6c337-63c94b45.pem @@ -0,0 +1,14 @@ +-----BEGIN PUBLIC KEY----- +MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxfZssLE2jeY1swPb5WGe +8C/FWKmIxlGLm9amCNdgheAn8RzuM8slA+TJefAQnrUnC4Qn9ykjQZjH6o2e2ueA +KFdgOdHnlS2d6lETB8dd4O8HYDJx0CEk2SCbAKVuzLbcbP4ug/QDc+Bm8ldxfc+D +GnLVRAt85brSTnfgOHY1PbQ1JAV+ByibbjCZuFmw4gIkMzeiy3M4wJZwblFM4a3s +X2bW/6GWaGz6AMOjCyAPI6shyG5wHZM7OvJJ8lfhXRTZo4Cc5qC0Nyq9Xu3O6DmV +opIajhHc36kdcetmd7TB5OSbQZCLyReAF75LV74y8960+44NptR62hdw1ovCJMfV +mU6m+k/MsN8AIyRFR6dNF9wTOKi67OpPtybiRufCfMvD4VEeoINzEJytToq2XGSc ++hIxtmPOhqDKHH0As113sjTqqo20Ik233x9FFeTFD8Or7ahpqjiv5YCufk9AoQbC +xMIjrK9RkQYgW4RycgvXGASobwN8EE+OsMcyMUER/pdCtQhTQCc1jYLt85VhfEkC +4k9szMB8eZrdV9re/Ku6vnCeXRR5yn2NWKO88U4HfxEpJv5s2uFJi37+x/v9w7Uh ++864W/9NexXg/JFNsvh0Kmxsbi3ZegaouLyrMCHwSA3ByBZ2yCf2VuFPyUCNEZOH +Owi0oc9TgY1yopjsTneyGaMCAwEAAQ== +-----END PUBLIC KEY----- diff --git a/build-container-d4ade9c3-5a2e9669.asc b/build-container-d4ade9c3-5a2e9669.asc new file mode 100644 index 0000000..b8f5797 --- /dev/null +++ b/build-container-d4ade9c3-5a2e9669.asc @@ -0,0 +1,19 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v2.0.15 (GNU/Linux) + +mQENBFoulmkBCAC8z90eiLqdLLuFsocthStfLoG/fklt2gjOfLm9IWJFcCmvQpLn +pTw+6B0aaH693sfxg2XHZg4nHO/TYGWytyZYNlxeMTdemyL8gcV9Fks53DBH67ww +0XHBFRXPHIjMoa1tERVV9c99vZdzoUvn+0S9C1Qq5Hpd3NJpq/ZGdXkjJsIHT2zQ +2nQBRt2LkR9J7gg26qBj5UVguO8zmidsBAs3dsUtLhC6TroOG/3dmLo3CinAvUXT +tQ8Lm5p2TJ49K0/c8DQ4A56aP29kAM5bHlp2wYIohKzyKmE0LmYNWgvLxHLj0yzd +5BdGNVA4xyjdg1/wCGwh3EM0FU3xVMMpWQQPABEBAAG0OlNVU0UgTGludXggQ29u +dGFpbmVyIFNpZ25pbmcgS2V5IDxidWlsZC1jb250YWluZXJAc3VzZS5kZT6JAT4E +EwECACgFAloulmkCGwMFCRLMAwAGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJ +EI7+G8TUrenDlswH/1PwQuV0Um6J5csZIcde25Ip/LJMoldJb9aVpBxn70WWL6GF +AVoVTNFYYPHUbzv9/x2PPLRy2tcta+YZOKvcFbkM2SHXz1KF95Lg50pDr++DWog+ +SDszvq3oVeIt3OIqvL1gbmp3V13qPLboFR+q3jMqMxUh9bYQX3rpH/cWq7h8yurL +KaiR9yQvHaPSrcGuJUGTr2zbEPBYCoMnEPuF/fNjwaTHmEX2fzoYhmIOZMH5x5W+ +F1GOCZrK34QrdHuS+LmpV8mQz0+Qpd7LOGcd8wF3K2ep5xiwpOdzBELiekZaxrJ1 +o0UviorRX4DPHLXZvyqPCCpYLWzj9b7rHCuenoQ= +=BucV +-----END PGP PUBLIC KEY BLOCK----- diff --git a/build-container-d4ade9c3-5a2e9669.pem b/build-container-d4ade9c3-5a2e9669.pem new file mode 100644 index 0000000..137804c --- /dev/null +++ b/build-container-d4ade9c3-5a2e9669.pem @@ -0,0 +1,9 @@ +-----BEGIN PUBLIC KEY----- +MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM/dHoi6nSy7hbKHLYUr +Xy6Bv35JbdoIzny5vSFiRXApr0KS56U8PugdGmh+vd7H8YNlx2YOJxzv02Blsrcm +WDZcXjE3Xpsi/IHFfRZLOdwwR+u8MNFxwRUVzxyIzKGtbREVVfXPfb2Xc6FL5/tE +vQtUKuR6XdzSaav2RnV5IybCB09s0Np0AUbdi5EfSe4INuqgY+VFYLjvM5onbAQL +N3bFLS4Quk66Dhv93Zi6NwopwL1F07UPC5uadkyePStP3PA0OAOemj9vZADOWx5a +dsGCKISs8iphNC5mDVoLy8Ry49Ms3eQXRjVQOMco3YNf8AhsIdxDNBVN8VTDKVkE +DwIDAQAB +-----END PUBLIC KEY----- diff --git a/dumpsigs b/dumpsigs new file mode 100644 index 0000000..80cf8e5 --- /dev/null +++ b/dumpsigs @@ -0,0 +1,92 @@ +#!/usr/bin/perl -w +# dump all keys contained in the keyring specified as argument + +use strict; + +my @keyring; + +die "must specify keyring\n" unless @ARGV; + +my $file = shift @ARGV; +unless ($file =~ /^\//) { + use Cwd qw/abs_path/; + $file = abs_path($file); +} + +# XXX: workaround for colons in obs project names o_O +if ($file =~ /:/) { + use File::Temp qw/tempdir/; + my $tmpdir = tempdir( CLEANUP => 1); + my $nn = $file; + $nn =~ s/.*\///; + $nn = $tmpdir.'/'.$nn; + symlink($file, $nn) or die "failed to symlink: $!\n"; + $file = $nn; +} + +@keyring = ('--no-default-keyring', '--keyring='.$file); + +my @line; +my $ver; +my $rel; +my $name; +my %names; + +my @cmd = qw/--no-secmem-warning --no-options --list-sigs --list-options show-keyring --fixed-list-mode --with-colons/; +unshift @cmd, @keyring; +unshift @cmd, 'gpg'; +#print join(' ', @cmd), "\n"; + +open(GPG, '-|', @cmd); +while () { + chomp; + next unless /^pub:/; + @line = split(':', $_); + my $id = $line[4]; + $_ = ; + $_ = if /^fpr:/; + chomp; + next unless /^uid:/; + @line = split(':', $_); + $name = $line[9]; + while (1) { + $_ = ; + chomp; + next unless /^sig:/; + @line = split(':', $_); + next if $line[4] ne $id; + $ver = lc($id); + $ver =~ s/.*(........)$/$1/; + $rel = sprintf("%08x", $line[5]); + last; + } + $names{"gpg-pubkey-$ver-$rel"} = [ $id, $name ]; +} +close GPG; +my $n; + +for $n (sort keys %names) { + @cmd = qw/--no-options --no-secmem-warning --export-options export-minimal --export -a/; + push @cmd, $names{$n}[0]; + unshift @cmd, @keyring; + unshift @cmd, 'gpg'; + my $fn = $n.".asc"; + unless (open(O, '>', $fn)) { + warn "failed to open $fn: $!"; + next; + } + printf O "%s %s\n\n", $names{$n}[0], $names{$n}[1]; + print "writing $fn\n"; + #print join(' ', @cmd), "\n"; + unless (open(GPG, '-|', @cmd)) { + warn "failed to exec gpg: $!"; + close O; + unlink $fn; + next; + } + while() { + print O; + } + close GPG; + close O; +} diff --git a/gpg-pubkey-09d9ea69-645b99ce.asc b/gpg-pubkey-09d9ea69-645b99ce.asc new file mode 100644 index 0000000..32a4a81 --- /dev/null +++ b/gpg-pubkey-09d9ea69-645b99ce.asc @@ -0,0 +1,29 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v2.0.15 (GNU/Linux) + +mQINBGRbmc4BEAC1syxaG+6z88/tR9DoHKMYJU4PS6oW7ShgFsqc9z2dW9q0JWWP +3OVbrXHSs9wbadCn3E3cjGq4/dOHpT848d2398njujggACbyXEtULSEefSmy7Ad1 +qGNkpeHEjPo3UxTL2qKisV2Gntbq1joR3mfHUbnv5JNn5fn5/hPzMQmxyyrGJaMK +cwsIw81NBrQeKIMHNrTxYY7qb4XnyD14DrbIYBeV2SRRZq8DNQD7QAkKXOr+z4av +W+G2AmNNSOgR/NuyO62BpuT0Pp5GijABGRLrr1N7tZJSu42ccQ+eAl3yili07aHi +gpjBkETBrYSdZqUQ/jsCDIEZurCYcEs5pB9hCCfo0Uc8nKBm0WP4i07rYeHU2i/+ +1yXqHSkIdEcFz4Mtab7m+FAR25IP7wNn/TqSMVsys5SPcva3BdE3t9vf/NJdPn+P +ZLzC2WMDeMBCqZddrd4lRpTqyHJpj/9gM9dMgUI51vhF7gQwOjLw26F+pRSMEzXz +bVX1Rc5hKrcBjuysxqdyBywlP6Re4yEZv19kY2Irg7cW3EM086lQx9EzM7zvGp7o +sxbWBm0N02URac2xCPuKTYroDVGpcKEHzTsl1ex+hc+ZZ4cEjmgzSGgew6BltwME +Ekll/oPfN3Gtugf9JV12OgE3smHIpWxjCYzCE4d9Ts24o4non1nQA48dGQARAQAB +tCtBTFAgUGFja2FnZSBTaWduaW5nIEtleSA8YnVpbGQtYWxwQHN1c2UuZGU+iQI+ +BBMBAgAoBQJkW5nOAhsDBQkHhM4ABgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAK +CRD+wo6vCdnqaUDDD/9RBdyaWfgALsDd4VMYkU5o028NvgXZjDP1dYAyDVS12FI1 +aLljuhN88Ha8dcwtutyv8pomrqv0oHftHsT/3JN+PPNsGciGyJsx2D/0Lt+xtyB4 +TA2GlwOj1CqgurbUYnKAMaEB6AHbIf2OG0mOFugC+2msJfUSPdZYbAx4KwR1rX/E +GP3cIBUItFK0EjzaAPoJEY/EOR0K3iT45FgcP+2K+ny7s+3JiaVPPXLReQvskUFm +Tv+JC+5m5njPxPB/lVQjLX02g92S2efmIyBSe0F5sgtEu7NN+4ds2Lt3HvWEuGyZ +xmtBLHkUqS5Ve0gWN/mYxyP6v5X4KHTvkhVr1bS8yJ+DZqXFmYEsCQSZ7WkKaeqy +92Lqo3qeuW3a+yMk2v3cpADzo84BFum/Te/RIJApV49D1+BC0gibxpI7qjYuVRcu +7Je0iCvlhKaqEYKw+nsh9BqoVFy1xhx8zjB5yBWlHHM5/X21gOaoRXIpkRhVcZWb +Ae6vrQrxWYo8RwLzYcAL2tsXasYDBCbw+Xza864dGCNr2MK/kIYTupmwqWyMs2QM +bl+1H0TiNpzvWlPEgDkHjMueQMGOaDmqErd/hGfBMzFPlBGTSNb1j/41Da7wGnIK +0pNL/MwVhxmtVnpDyKE0+ctL3RtIIzfWqhdESPnieRC7L1Edkq4avzVDf3vlKg== +=aPZx +-----END PGP PUBLIC KEY BLOCK----- diff --git a/gpg-pubkey-25db7ae0-645bae34.asc b/gpg-pubkey-25db7ae0-645bae34.asc new file mode 100644 index 0000000..f508fc5 --- /dev/null +++ b/gpg-pubkey-25db7ae0-645bae34.asc @@ -0,0 +1,29 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBGPJOdsBEADHSc5hN8dltyP/10MmbsgMJJyCqXpnLEkg7Mpzh/v7lRaw3GoR +q9J+VISzR8wHPq3vCuTTxJEl4zaMOlaqRDp7cNkJAcUKTS0VH3SCpef/936j98Ad +EtIfB1XXuUl+Lo/5f29UOuhDDtjUgx/wrEmXfgXvRi/4HZVPxepaQIIqas3avI9r +kuvCc1neCNtWr0OCIBH9eIXZaeAwjoEMitGZZJcd9kyVezfTztpLNe4YJ5U8NBul +KclsNfxfemie7Y5U18RCkmo+1CJSGUO49l8QNHM8Cz5H9BQMwRpdTxWra9ARFSF9 +I3Jtj/LesXZgxBs3YbrlYUEr11rLqi2Tq96VhxUrHGc95Kr4PBQIq00s5MR03Akh +HNKxrLFWOhZOJKwEaaKKlL50LBFEZxLceoRxIoJvCURmWG7A800PfXfMyl8qevg1 +e0bTdY9MLZxfQgq0Q8K0tuAj7ZUe/rgySwNZKyLWDIhZfGynKdkwDoNDF5tZ8VvC +3aeovgSBiotnHu7CmqyOXNJyrWbkUL92Piww7Xw3x7ouopXQtXLH8v5U07zW9T0L +b+OWbljluvizIV+6BFMcGT88TDqyF5eiDyS11HI2B7RMSvcABpmgxsl8NNaxTJua +8yWP1Mc5F/QkQU9wqNMeI0zR0SfO4F42FhIrD1psMEL6uHBEkKD6zrZN4wARAQAB +tDZTVVNFIFBhY2thZ2UgU2lnbmluZyBLZXkgKHJlc2VydmUga2V5KSA8YnVpbGRA +c3VzZS5kZT6JAlQEEwEIAD4WIQS1blYBQdj2VC3/O/mhv8Ar1YjcRgUCY8k52wIb +AwUJEswDAAULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRChv8Ar1YjcRuH2EACV +7tSymShwSRFRDGOap1zsjy9yqU2TXtlWi0YXZUoUPj2TnEBH9IC2toEHu3+IVPMW +jsSe+4xaiBFXhTVmW4Y7/66zxwZKOkwTRV8yUgwuRlAuC3s57xR8X2nCng9xchan +IQ+h2KWzmc+Gs1tX+fUtoP27UT3SfYJYStXndaxmEIsUbVQlTDr8A4sweM1iZx65 +jhu872OlgaYpO6QhDRl7UJjZAtQc+PfxdEYFq2tucKRJu0CHivQJN7/Gj4kQl55h +yAlGIJ0Lb+njzUUXlaMPdyKm+4yiFH5j4fHuG8lfrFIqmF4RIAeYWIH5RRzyAqOj +uLz0ZYnWl49++q6OAN1gHcFl+fC42D+zvpfx3gkNGG/RDgIdpkAPbeA+jIG16ns8 +wrO0ygNO6Nrr88KTRHmJpHX+CF6Lb6eYAhItRIQflH4tiNadc4Zib0hbdq/eTnB7 +o34MSOKOpOtijTmo5VJLJAe50jAUu+xagH9npjf30fKyf7Vh0wwlSXJLmd6YinkJ +IMzePT2d3YuIS8CcpXs3HewAGuaDux/gvN4FSBc4Hnu+Dh6BIbNHb/1kS1Dxm3Q5 +d4wYKnJZXGczheIqBM3GhlOmzgy6/l/9QShOD5OmNz6u+DkbobLg+Vi/wT2lpYTT +oTPpgdsFl/g0pEYgwo1+V58asIEF2lx+EpXTjZtGtA== +=Tc4W +-----END PGP PUBLIC KEY BLOCK----- diff --git a/gpg-pubkey-39db7c82-5f68629b.asc b/gpg-pubkey-39db7c82-5f68629b.asc new file mode 100644 index 0000000..ee13f10 --- /dev/null +++ b/gpg-pubkey-39db7c82-5f68629b.asc @@ -0,0 +1,19 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v2.0.15 (GNU/Linux) + +mQENBFEKlmsBCADbpZZbbSC5Zi+HxCR/ynYsVxU5JNNiSSZabN5GMgc9Z0hxeXxp +YWvFoE/4n0+IXIsp83iKvxf06Eu8je/DXp0lMqDZu7WiT3XXAlkOPSNV4akHTDoY +91SJaZCpgUJ7K1QXOPABNbREsAMN1a7rxBowjNjBUyiTJ2YuvQRLtGdK1kExsVma +hieh/QxpoDyYd5w/aky3z23erCoEd+OPfAqEHd5tQIa6LOosa63BSCEl3milJ7J9 +vDmoGPAoS6ui7S2R5X4/+PLN8Mm2kOBrFjhmL93LX0mrGCMxsNsKgP6zabYKQEb8 +L028SXvl7EGoA+Vw5Vd3wIGbM73PfbgNrXjfABEBAAG0KFN1U0UgUGFja2FnZSBT +aWduaW5nIEtleSA8YnVpbGRAc3VzZS5kZT6JATwEEwECACYCGwMGCwkIBwMCBBUC +CAMEFgIDAQIeAQIXgAUCX2himwUJFeKaMAAKCRBwr56BOdt8glQcCACXQAkHKf0y +7EPlayuX/EHc8sro4IAJDZqQFiPaJh8F+5HWD36+iw3D/HlOlzbd2y9oVqtbVDZV +amOJ0KV+l2oxPbMVg32plYGXLlXh1Gwp7/lLWieceXVzf3AbleejgXfafUyiCuvj +VaQyPNcGlEXIjiwi3qulw0+2rYAiUAf6KEq4wM9a/KLTLMhvxi2NigC+MiIbZtmt +HlpFhMkp+Bdpdcqtz6cAucE3dSpVQcvkfNLOkZgrtkZfzkNBPaWnyZLtWdSrQah2 +vdIQX+RvMYVAQP4x+aL44ALlhnyeUST0wIX4AH82ifSnpvz/rEb1kpERj3XhwW+N +NPBstHtGpA+l +=cJ/8 +-----END PGP PUBLIC KEY BLOCK----- diff --git a/gpg-pubkey-3fa1d6ce-63c9481c.asc b/gpg-pubkey-3fa1d6ce-63c9481c.asc new file mode 100644 index 0000000..3018e52 --- /dev/null +++ b/gpg-pubkey-3fa1d6ce-63c9481c.asc @@ -0,0 +1,29 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v2.0.15 (GNU/Linux) + +mQINBGPJSBwBEAC+sp2UJHVei0aAkvnEeeuRrIbzyWotRYuDgdWzS4V01alxFl97 +ZPA6syyyZpITGP6fLP0AG0KipXABcYdaF7iFGKnhm6v5ExQ+Aft9SNaJmGqxwPng +2jHGoaovbcOrvpix1INwPlxyxAaKfCtdH6kE9ZBzZXKHhDwTuBAyIJmvz5P4djxs +RFxryZ2wq2IbhT/eu5b+3QRdeOHhbP/K2ZA+jd4Ct6uSyEAV0n9D5rVrtKhYqzp7 +zXPYntFW9IgEC/HisQ3TcDhKqK0xfxsQAYjsrvrbhc2O1sHWfhDEqV7W8yPrEbH2 +NTWmQxiSf4ZEJsKOZa6TI4fOS89OPRRIC0Ec+mFWHHSfhGaiK0g59TSuBECke7jV +hgwLKa0WGzxhYaZ/dPxjke9MfHPIlCrwfH4tKsEY5Cy+GQWwt8s7J9lK1gEGz0c2 +nLA4PBDCPqKB/+GEHkF+hyN1GHlhoY78mJ+c/QHyTv/DYOvS3jr5RaJYwKkBHS+0 +5pBUGW6PANT6yoDGOGLaq7hJLdeAwW+qLSfFSxBOnjBrtBV4Pqj1kbzCKFBGgazF +UPhWOSRms8erkr4ltGtUPDJxna16uoTZaYkjn7fZ/3iTqVgnSC/sOJM9KpA1kFrg +5R1OdTzymu7OwH7cmPSn0Yyg1BlU3K8EYFRFfhKptcNzuwERIAdcY39QnQARAQAB +tChTVVNFIFBhY2thZ2UgU2lnbmluZyBLZXkgPGJ1aWxkQHN1c2UuZGU+iQI+BBMB +AgAoBQJjyUgcAhsDBQkHhM4ABgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRD3 +Twm8P6HWzozMD/9xq1D3I+YWyrKJJRhyX8O1x3oYwayo1Si8VaqHUHMx5vL4VGub +cCGieg6+9cwbGVVqh4f0wozrrllTgwXuepzivvwlQnZ/cfdjYwV961MTl2/+0JD3 +Hv39ef78DSU7iq8Pa22MPbXiliRvm3YJEsBnPRxDnGdGKDvLXlwugmHwHQXUTUvm +XpipD19xgJ+FUKxbsHudiFBHAfvzmvckn2wsz6pIasAH8PoWFyyoYbGbffDBx17v +YHhkZODadeD9N5lyo/mNkjFjTgHSTDYuhsor2AkSe4ptyY6EWONGg8ezqLLqJgWj +KcI3o0dOf1dpIIubkbrnshul/tT5DHQrKqqPDu6zuloKOSdKBWwh2zDPGYVGmii6 +E/YKw8+lgTBs4Xuz4IxPhD/mSjLrADjuObhZhwQuM71SkQlScX4NhEeWoWfBg1k2 +2V7zU6lGodEx5QtmeMe3yhMsTUBn9ls9VR+Zr6N1rhcubDwDu5JLbbUyNBOiqDc9 +yQbIOD9bBG+XTxzs2VsAFkKWuW8opSJIDQ1LDg9pKF10IjrSyb+ln4OuRwQK5LHy +mGllHiz1Feivf6//Tb63qgd3k8HtwdjeK5YuXM1LwnisIhfZuhKWm2gdzKCvdGsn +Y0bH1r5E/rCFhRii/iyCxZN/2KIg/dHo8BXoh5zvzJ1XZ/bgiDnWSkQvdA== +=umXA +-----END PGP PUBLIC KEY BLOCK----- diff --git a/gpg-pubkey-50a3dd1c-50f35137.asc b/gpg-pubkey-50a3dd1c-50f35137.asc new file mode 100644 index 0000000..2aa6c01 --- /dev/null +++ b/gpg-pubkey-50a3dd1c-50f35137.asc @@ -0,0 +1,21 @@ +5EAF444450A3DD1C SuSE Package Signing Key (reserve key) + +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v2.0.19 (GNU/Linux) + +mQENBFDzUTcBCADQ3p9ch1aR6cBqL+O7UNO+zFNTI5WxLf4tegWP8uuxK5tJTgXO +tjnwWmWIaijO6yfCtlBu8hD2Zp9sMenDY42yM5/uII0RpszqzqwwK5onnjGcSkWZ +8jAAn+mtLIJvCLCwTqwEM4mTdTZROtCnttHXZr4GFrqpeAh+SKEWIoMF66N1FSb6 +S0evzYw3ryjbFY0pial9/hqqnsTWCNHzE1Up7qdNIPxDV8UGyUzm70/xMMjJSIkB +aGpRdhILfZgyH6Ajhm7VCPPzW/BO30RSjHDnyo3hR39jE+KxvdgqTz+AthK5z+p2 +mwQ+ohTAo4dGb0lyZYFpXD7ucEl9w1ygzUe/ABEBAAG0NlN1U0UgUGFja2FnZSBT +aWduaW5nIEtleSAocmVzZXJ2ZSBrZXkpIDxidWlsZEBzdXNlLmRlPokBPAQTAQIA +JgUCUPNRNwIbAwUJB4TOAAYLCQgHAwIEFQIIAwQWAgMBAh4BAheAAAoJEF6vRERQ +o90cr+kH/RwB21ma7cQvZ1lHvgcOTuM7Ttqq6x7uuFFDXCIdmbDHv1ocQI5Z3VCb +/7w+J8ZcBwNcr7i9Qsayu7umCILEOO8pNn/SlJVz6Kr6j6L8oAC3XHbXYrHacwMR +y9jQPCDqP7WZduRgEW2VWnIoNp6p/DAj724EmfLzURwLG1QKiLnOLtpygzyquk3S +gPGqgro+hCWX/VWgtBEKd33mgvwCBGjIe86VMvLCgtggyoBWDXYvsQMBO62fnk5w +Btwum/m8VPhWhcrbUK60ZsHbdwfmsBOKxewf2vIuKUcqJnIYCfsuBgx9xUxiNlGR +BVJIlG17h0jlRbEuuRez2397vU8Zw08= +=SfX3 +-----END PGP PUBLIC KEY BLOCK----- diff --git a/gpg-pubkey-73f03759-626bd414.asc b/gpg-pubkey-73f03759-626bd414.asc new file mode 100644 index 0000000..0063e04 --- /dev/null +++ b/gpg-pubkey-73f03759-626bd414.asc @@ -0,0 +1,29 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBGJr1BQBEADgdib/xMCQ6hWeR6DpMfqPhhdziI2v+6LGLHPP3SH2TGLwgHGT +2vP0kNRKRm8SnP8dulKnXeXxenfgpw8CLu+npM0L9KxOxCqFJ0h1GXIsHP+eAelE +IWMjZyNEXPhTyQmRmpmnOHAa7NK6GaP+LTSviAAMnInEcj6uwUTYgE5nDPohljK8 +w7kdLGZXb7W9zXG9cFALf69n/MPVQlyzWk2mBMpNSVQLAT61klhAtOfXPJtIu1oD +L1QDW1epy3Ro7IqiHx/RSkiJTsuQQhL8wtfr9FH/DReojNscTyPuVn6zoZ7clWyx +f0f4Gd7kaPP6pOYqhmT9y65OhSyQdqdxhSj6XwPCRKrVe8hFv8h4EUyt0840N24A +0+hAkdOnY52P1Xs+T3R59sKtW8iaNQOj8mhM933SASTkLESulBSnf2plYfa7bEyM +bQ6Icj/7hfe28P/uNiuuSQTu9XlbM6IWNiUMKjIR7kC0Aqn+Eop56LYV3uzKcdj1 +vqELb8CsjKyLql5wrFvFwg2Odg98/rvwfjXGuyVQebC2t/YnJYDuywbrXPX/G2Sk +EnC+7sAXoPlKUj8Cf9ixR/31f9vkiNOnUhV6W++EE+Y96qpTUXByd1jWkLU+vZWX +tamsVVUvKgsZtlJLDp1Vlc/p5D7rYnOsPrRZpCeldeX4sc8/kpahdccQxQARAQAB +tDlBTFAgUGFja2FnZSBTaWduaW5nIEtleSAocmVzZXJ2ZSBrZXkpIDxidWlsZC1h +bHBAc3VzZS5kZT6JAlQEEwEIAD4WIQRQVnVo8pIP8WWyX7LHuB5Dc/A3WQUCYmvU +FAIbAwUJEswDAAULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRDHuB5Dc/A3WYVt +EACK6c6LYzVfI5h5/hgTz9qZM/iYzIIrl50yzp8dhTsBtAavsmbH37HxHHlzL47x +XsUL26C2mT1qdMoTaAA35htSse87eRPP+DFOCyE69E2konnLCcN1VZSdmGmyEqCq +Ktmj/iXTlfvu18RHUd1RYpyJQHYfjGorzvuJj1FXqk96UsKc6xEIRycgLOqcCyTz +oTuIWfZBMQpRVXR1v+dUiGmII7YEeI7liPDF+GazJ1hAcIIFaAnQHiCcwkv/8n6u +KDNwYIFxkdOXPHAfOBjij0CYUoGIX0S/oaaDIYd9nCHa3ej5aFpLZ9QnuXTfl+6k +6JasumIxjg0xg8AYRsMIg8GSdoKgDWb7QTKOVUhy5pFkkClXJ9sYCKoiJM2v8Et3 +AUiNCsNmaFR+3wVBKKgEjcU+IJEDR3+cLR/pIo7wWLanlP6ida2/NeTtdi42ltJE +IdMU4jkNaqBUw65aD3xr8+JfoAPJyk+jaYdsZb6usb8wpGsZZo6PTmzgLpfr1u7H +jdNWoqnoU4d0Vp4fTkBh1KlVWMnXEHrJEm8A8SxG9ToOmskzr0OtRrRHYN7Gqaah +d9/59LNNOUllHEBP+Ga4WqBRaxYo7yKekg0u+nGnY9liYi41q9zxkID3Ps14Ddiv +Uq2VIEaGKpkcE2JMrio14F0DBuzghBWzWWYEy74jFsl5pw== +=LDfu +-----END PGP PUBLIC KEY BLOCK----- diff --git a/key2rpmname b/key2rpmname new file mode 100644 index 0000000..09bdf28 --- /dev/null +++ b/key2rpmname @@ -0,0 +1,13 @@ +#!/bin/bash +function keyname() { + for key in "$@"; do + while read line; do + [ "${line:0:4}" = "pub:" ] || continue + IFS=: eval set -- "\$line" + keyid="${5:8}" + printf "gpg-pubkey-%s-%08x\n" "${keyid,,}" "$6" + done < <(gpg --with-colons --import-options show-only --import 2>/dev/null < "$key") + done +} + +keyname "$@" diff --git a/security_at_suse_de.asc b/security_at_suse_de.asc new file mode 100644 index 0000000..e1a4c5c --- /dev/null +++ b/security_at_suse_de.asc @@ -0,0 +1,231 @@ +The block below contains the public key of the SUSE Security team. + +It's used to sign security advisories and other imporant +announcents concerning the distribution. To be able to verify +signatures made with that key you need to import this file into your +keyring using the following command: + + gpg --import security_at_suse_de.asc + +This key is only used for E-Mail encryption and signing + +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBF5ngbYBEACq6KLsgizrqkh6/m/jWE3jY0Q3RoI6eKmCnxbdhnW5g5drUtuF +LB6BADuIiMjPou4cSjNG4siYIqgcd6pw2eSPFfijKaLO5i1n+UFfFf0mcDxLM3AW +b1Dx7IVVUo3Ybm743o9tXrF0ao4WQfwYm/K2Qf7jTmeaXFN2h5GtlDcvqDsEsZhR +mowPG+jsNgHn2QJTicGPsMWgo/WdJZISY359iRzeYzkx+YIe/12Yt4l3nLtnHjag +ICmQlS/Gc+gG/KCXExJfFypwTj32iHnHTI/xXifT0OIEgJjPgYDW5JiRUAKUxZ21 +K2viFOd5LveYUO6dSnqCQp1WWzYCOfchpH2SAtMKEesmF2Kzd7bFJFI7NPJxK2oA +EJQof/F5UIij/yugDohJ1SywFuM3nd0x2crUgjzkw5WtKvZstNp4yw80d8+5lqRl +LLtmFt6p9gmqVN1pwQv3my21F1TMy2gJLvqpOgLB7M1pNFazEc01V8+jjGCNjCI3 +2T37UAISsWqTxfHd42CpyNhf2UJu1tUf2plGmJ4bNAeoFO4SuSiPgC1KTq8qKcws +93OK+w9nI4qcHPMrQy2nxezbzi4M+qeqGn4PbFQQ4FnpamxfJ4srO3kTJnpVcXS9 +p5oCmGubO/ecki8HL/pRo/b0HuHPfoxlmDeK+jNQMpO/mAsV2Kv/hjjdqwARAQAB +tCZTVVNFIFNlY3VyaXR5IFRlYW0gPHNlY3VyaXR5QHN1c2UuY29tPokCUwQTAQoA +PQIbAwUJA8JnAAIeAQIXgBYhBCurRF+5tPDTMOR8sLIF5purL9kiBQJeaKikBQsJ +CAcDBBUKCQgFFgMCAQAACgkQsgXmm6sv2SLhXxAAkAfk7pCMuYbJ0j1LHxgaRTfv +S3uBCfpugnb5h+it7Pb4zSbeR3A//Z9syJHmQ/mKDyiaYXkyFj2gmmEAxxfknpy4 +wFraHOM7NXSbqaciIMxkN16x95dX6A/xC+HavBFK5xvMX8+iGYgE+lNo+b3PzCo0 +a0uUzIDT8Kmsr5kgzcbDjxqHpgYLFj40utfsKaq3xANx8mOOn/xKL3OtsLKRQwty +51ZkqsrKm9UB6vNgveVo2ZZOlLUQCakQyQJv7HZDncsp8D3Jug9TAK0ef7g8Kq// +YVHXmjyvx3ADovSsSoAfxDaqjHL2GQkQ156rVW1B0gbmYVCkXzdsQCpTVS4Pyw98 +pZLa4BxSHRFTBjqZsbpfrGG0VpQPt1o08mMkWDAe/NJ6BAge6v9PULsRLLvdkJYz +xRGE76trdE22bgVl5r5a+eQP2VvBWXrM60lfy1sML3jUVKlQ+PGBex9nd56s/KcQ +w4tYBAMraUFe/md/F5Uzh2jARhUgFX8UwATZlS1rtpEoYZE7D6mojTCevBnSbA3R +p4F7G71tioRKwBKcxwKAWxc+KdsKGK2F3ITfqdgTT1MN0w+5Etcyfg1OWT4M3jhN +9DPSIKxu+6r0bmM33m5gzv7IclKkXOH5tUwF7Robc7yXi0GXVWsZ3MVkVjEtKwdN +SalgOFMETUVepEGL2ZuJAjMEEAEKAB0WIQTsfF6rLDQJpk87vm4h/pIyK6ngZwUC +XmeDwQAKCRAh/pIyK6ngZ4KQD/9lbsVIrtSoVPqC2yldRF7g/V+FCIOJIriwvE7B +POJmI5lWLHajaWVAa+4tpNFq810tc3lV6EYkYt9eHvR2Qh40QlvzzUePFc2M34w4 +Yh3o+sBSPwzJO5PD0OBXq2YZziWukZvgVm1skqoegGy97ZXxAxM6LpopTGNNt/2f +JHqexe5HCd1wRurB+tZZR3zXvyEd26jHWSi8IEBXMDEtQ6c59sr2vk9lHdM9dyvP +HpV0WH7skAy3VtoZ9NvZrUX7GSajNfEefdJEZN2zE6tKzbw1JxO/0IE8WrBKrBer +QFr8nqz6uRMYJ8smZHWGMspucJpxE+TlPWNNYu6RfK9Gfebw0d8LQPvLkU6Rgdvs +DkkvuAlcWWXThx3uRGyjMcOUrpEgxSiqgmIXlfpszgwkeyguFI6vOK+e2vtQ6B+F +UOfP3l4P1S8oyXl2hp6LIv9ZJI9oSP+I+wnhDC3wLTZkq79OpIhFE9TvVsTmYBpA +7i5LZ/9c9ZcK3YQ7til3QNitJv5BNLsLX3PuE0WI+VsmUEYlVoi1taHQ9IbCoE24 +5pXExRAuh9fdbZ9Tj3alRZjHcNZqlIyC4kL50/t5f94Mr8Zi2+OLDhJjmQmCVMgm +ZY8Rifl6/NC1egJVX+8PDPQCl1yYmTlPPk+yr5kbFVTL6utqeSeb/FdJAgOzd/FR +pXkeF4kCMwQQAQoAHRYhBO4Wa86tVuA0v7M63Xv3KdXnyB+gBQJeZ4PmAAoJEHv3 +KdXnyB+gqhIP/AhLniT7IIwwABTFcRMRfsWP7kdesVAnjYdhF7mRlpAP9WH3SnQG +HWJiYatQwypO9xs0DR54QhLxv0JDahROfE1ChH0nlb4A90eRIsh6aof/ihN8U0QX +7sa7+dH0YVixJibdXq4wcVeXbljI1upaKOY4wIu95ElDlUXgqH0C+Hi79IbHWkzr +fGgLyuSrfXOaMu1Cj+cmdtftANpxAeDXyVgEqU6OyNvxyz9/LoSkpKoci10dPrSs +hdWPL6r9BbShPF/KfrIZWqePglYwEwR7RbfofyB4NmD91izfveK9fXLrknOwsP6q +Nd+lRBU23FAMBfK/8AhysCxJYkyt/zNX1D2RiykTvWhiHE/iCB2NSpGhawDSd8pY +83fJ3wAKkvoayYuTm0+uK/PIRopWHsPOQ7Kc1aTfIWomifQQMyE5EmBgbcZONas3 ++wqNBtbZSQJr/LLC+C9cz+9OxK8SivI5HMhegsGHMrqcQ6pD5q8wVujDPWmT/K3A +JuMgxlAwtSRWZyBa9/yWRxzz5NYpocxVOqrW3KUfu84aJRP4AmIkcGxMg6o+Z3vW +WLZ5+oPYnWiPl+RH7w5o934m+CAG03L7z6L0RFUbSSlb8cfiz+t16uhytCrNazbN +IEsJl7ZHzgRhKwlBZi83KQdIC9LGXdsJq7prXQU5oMdj1L+4upB/ZyFciQIzBBAB +CgAdFiEEfEr9Ydiq51cHlqUXIgnWkC+WnJUFAl5oqOEACgkQIgnWkC+WnJU/TA// +V6k62wxx5jLiC4FERj9WjoXbOzcj09AkJ65HypyOUkGlxeeRqpJSof3Jx7GfZGNt +U4WGJTY2f3KslqgjBe2KyLzrIWkQtZ74exxEw+dlgjWtvgtY8pdWWQKE4hzbi2YL +ScOLdykdDIw/cHO4KUI3RbYdDDfC3pdmKqmU1SQWpgfUMzz8mflUNIQma0ZHH4Da +WcPo7Bp3VgKaAEDotLPqEUHOPKIrAmSL+qzq/uCJbYIHWpws4UgftH4k2OLhfH5m +l1A0G0FMQ4IQ59V0nXT9zpmb21CIko4GInaCKCUbcyOdFuNKROAMpZy+6qmVazVf +scjovcgkfyCPsSXzJ7mmf8SK2les9IL5gU6nYXE0JTW9ebomUfqKK+Fi6mHC59N9 +ibdg2G5FaKvQ7dNytDPrdCgJgixmJwakGQDqn+SXepwBLprIIPy97yDSzo+M4qUb +jv4wIL8Hp3dY1pWWek4lw5/NxlzmBdZNCMXSVwumVXB/EJn3d/VjHxahaPC6/h9d +qhBclJfeBlYcVbu4UpGzcdnUVs1p9NkgdUawaeqh+cBb2Ptl+M0plTGRxHZ5Lk9L +OK6DoWX663ovTbc37VSA6SnJ4BIFYEk5JUJq4099GFQ3PIcAhcrMjU8+aEnGYU2P +n+oXjdGIvxhmHWykmsfddkzYzI5zeIElZVt2qXM415mJAjMEEAEIAB0WIQTCcDhI +qkp4OphIuwZWoz2ctlIYaQUCXnDcYgAKCRBWoz2ctlIYaetcD/9Q4ADKprA8jOlW +A2M9T6MBNx+u6L3LOUUTgZu/uV6Ecjnpw/cTWnRdnjT3pLkj00SEF3vDlEVXCl4e +4vvJO868urYYyuoMMODUAYWR6MKBO4WaDcg7ddKh7ywhYO/rr7U0O6naV9tK4TYS +zqdyQJiGKjMSi+oQfzkeV8tegFBZlovH7Ac7gzboXZ+ZSEdhQza/vBClX6lf82n9 +/JmXmCt67+hQq1aa666eMyhwTk1hHJsA0g/w4InzbWszQh+9a1iuyWIRrWrOVadu +REcYXLNqkCIDcjx5MJ7+mrZqwnHKdjOvynZVtiAWH+x6HC/nSJ59krR4EN4wz2RJ +UHwecQgEOlj7MQqaSCRyKJtq769wJoOwslIH2EZ7J235jcNmQSvuRGXof/yz8mkr +4XypvE4ColVXBmoDgBv7hCn9qEaGYcCihodEmIna99W8B3lIf8M9PfJAhPahtyjL +XklHvLg2tWzlmcW5+PLOrCQXydDJb0M2QbyVAUzzbuZR7mFwhH1LjJbmI5kPPBdV +SaCwcj4BqUxybJ8vGR4YyfEhCO7vsrA2ySYHd6MBfLdPuilsEZa+buRhcXItXi4u +2+hfEp1O+0ccpl3rtWO6vK0QNcPysU4VaOBKR79hLPFQvCb6HTGxyJT0K4CaBzmy +qegq26Fq5dsFs02N5V69jvXfolnbGYkCMwQQAQgAHRYhBPNqBtQPGm9XhEmXYxTE +BclxkjVTBQJeaLJCAAoJEBTEBclxkjVT9YoP+gMbofji2/QPCoAjWWmoF1fxucrs +9FxHp9dPiPEONFeRzzIdWrmy0z7fyCBoTI+883EninLV0aOSqlDPqI5psXCcyXKZ +0YEscjLvyKChpBRXXl0C8I13s3nERF/4vdscJ5BhkGYCY+xGL6KN0WurhnaKpzyF +hVB6PPgNlW2uEXLuJrmpRE2oIZmJ3lU3C5Ol6m6z10Kv111pX7z07mLh/FC3C5eZ +wwP6hhRL0Jq7lx6Fedl1x7R5qG6p8k8Oe3tGD+RqVUxlc6bcYTQ6+wbmYcYOHm6d +E9RPIfqSOzG6JFLSnk3YnQT67xgj1vBEaWwyccOLnEAwbz1GVHdKrs7/idShuONy +hai7b7Y5QzaXhaiNwOW0nCUo54Sjp5mbbx7vE0PptIrQDipuOljXWzLbRkhu88OG +zLED0zMy3xI35mfHo1EkPp9zcJ+hpSEB8tkksQpxtjh8iGbgFYP1JUf/SYq87ian +HUlEoPQdbFtQJQHRbz7XIPskKFaFJxm6G9XMVngNHVbKTFclAv37ZpYQLucbxiEg +yZbNKMKpZGvBszUVMnsctuHy0Yry5oaHF7CTVYlaXEQLJTu/5gHMNV/chkS3miH3 +PNbKXtOpIUaCcYYZU+S3/z98JGZGzJssefyQuB48sIxMHkv1GTTAMsvjUVdciied +K7P3hBKGvDoCITT7iQJUBBMBCgA+AhsDBQsJCAcDBRUKCQgLBRYCAwEAAh4BAheA +FiEEK6tEX7m08NMw5HywsgXmm6sv2SIFAmIXlBAFCQdyeVoACgkQsgXmm6sv2SKe +cQ/9EFntLrpnfLRImp+lg6CtFYX47W4dtn/1xI1OYuP98/yNPxGg/CCH3yhT/RxN +5iYH/q8GiZa7D2GqLIqphNMNZG0TGt3RjHja7nFI1Lvh4H2r8TLDrtTQAaQPSEf+ +ngqet1Z48UMQwpnZ1B1DCT6ZTtIkeIoemPhynPiYp5sZMB97DFfmd2zuQbTGyavy +NH0pK7VVDX3zcT9NPuOa+0Q1v/aPQOznKrxzmfP/XqB9Ab//WayGQ04tJVlkR4f7 +xYBaZ8eb0GF2qOOElIzoXh926vxYmxLX8YKtIhBh79YX5fw63enQqR578yBwfvIf +p1u9eeT/DaVGXaUlcsQHCkabwNEaGuVMF13U/rapB7eSK63n/PE+KaGP94SYiYfb +/0o0xGOGFLUJY0NadjefTrx4Dgv/rB4NBooxjEk5Zyeu7rRYu+e9jMjQImwhKIbN +C4gI77MjZ+4mA0+Wo0dzHtuXyR8fV42Cm0qXgHxqLTMhCNlxhs38TeBmuzQjNJcS +4JAc9FrsEdx6cz+y0olPbMRkoEC6rx36IrGeWEqU5yLXuqL0Ll85Lq5F1DB3NrWt +Q8CwoY2ftahi4TyI3B+SBBm7xN2m1sdxcLO16eU2+d1GYCH61mCl0ffjAoiMfXLo +G+F5bMb19Ag53ewj/7lJfo9C49w8rdEyAnfEDWJymNyA8n60JVNVU0UgU2VjdXJp +dHkgVGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JAlMEEwEKAD0CGwMFCQPCZwACHgEC +F4AWIQQrq0RfubTw0zDkfLCyBeabqy/ZIgUCXmiooQULCQgHAwQVCgkIBRYDAgEA +AAoJELIF5purL9kidCMQAKVihQ8YlmWTOYIWZ3UX3w0V1pAfPlT3hWpwajgjd8/5 +Vau5clmdAG0dDh0KZbXetUMcrH9kTp0r0ri0/7Y3mvh09DkLta4IZsUS3LZ/wedh +z/ozsyOMC9g7fqG4+BVB3QXgMGWruayqJq3mV0fzHlia4AYeqPcAGSnOyAt9YVxt +ZWUO2qySSpfn5CmXBt+RWrfyldR9O8uTkrBS6mLU2d5amNL38j/HqDL2qw8mWnUh +Hx3h2jGKL4WwtOpPQbdaaPRc8z5ouyuS+q7KY1Q/sUfbqJBf9KpjeFjACV4M6l+R +e+WalMmABdd7zVxpnC1ISxGEkA8a8lYrJfay1xcET3VBUwp6f8J+Qd2tIHMh7M76 +quYNvehjTgQF8RTPqejJBWPbYiT+/WZrhZf7RGubUbqxaz6vTsrigbKAJpjgHZBI +z9wnJm4zrJCw2B239YEIpOVi8OFLnuycnCMTzLj1p2l+Jxn4L4JhNGADD5KHMXL4 +YrUeOZPfVWOAtAq7pZ3RDsea0NqxkeJg0VrywJ3Dto/wUcwAttspnOZeDAUMmVo/ +D8IJC3ubkYDJFqgwvnfE9sS3lXXBqmEvr/58jMgWw0b2DM4S4J3mecRHCtywNY8Q +9acQ1L9VA2wm6sMwhp86k89FMQhkiyBgXgceQpsuD+V17+peXfsXOgZHTrou0mB0 +iQIzBBABCgAdFiEE7Hxeqyw0CaZPO75uIf6SMiup4GcFAl5ng6YACgkQIf6SMiup +4GcPgRAAskHJkdz7iEL7JqJ9MAXYGF2jpbmNKGc9XY33xOgiLVy5HtG8gcbIU2fU +6U/MGu8g03vrhaYapwy7D4MvX3innhgciAxDDo+yF8gnDflMfYf0uVEWSo/UGqzn +EO7GFerASFzRFXbvAgTbBTLTjQli3wYCvdlaEJtAuH8DBnh2GmVy+fTrDKXwyhUg +FWbmLvNLyE85sDhbcHpBSWxA0/Dk9ZwQTRRZO0kryIoWY6X+iJosQlaZSVy5CHkB +Zls92EXm+6R64RmDeuUrN8p9dBZhvLT591/8TM9fTiwkHevZ5f4uYUWzSlLv9jcV +H3M5saikcwzCZ2MUNYRQLim9YGCgGh9979wU62XuNXyaNgv5IRpCvNIElp1f+ozU +EVocclWNy4MMIBIaDvpu2iEKrv8f6NZmjoIRKD8Wm4OdFZ/1r/hWU4esJjy1WVwL +GDgcnx3wv/PxfV6amO2LAfNNPHZFcOpO9SrH5XDXp7WsWP4JZIZC8QH9ksBU2eiZ +MVpzsAh0+wkyn5j/cmgB1lNRuxVnPRYROVlyeLcI+YjqX0FT4YBe6QIHCTWowKAq +9gr4n2bzw7WweiddyDb+uWLF86t37c86he/GPGnFmWdQxSzliQLGad0k4xil0TYN +ulfs1IjYALwTD87Oqz/sGnCfIKiiZl3OxrWSZjrvuY5vxcdIAV2JAjMEEAEKAB0W +IQTuFmvOrVbgNL+zOt179ynV58gfoAUCXmeD4AAKCRB79ynV58gfoB3nD/0TmwqC +8C8tic1PIMDJLDkzVa5q+Vkma6VsTPgWRmZb8O6Al+v280qeyVYo6y98ZEbRS1VT +S3gtoDDgZo35f37fdr0tUHB0P5JC3NQVKuVHcThulFSIQ4IYqARMd9EuRIG4EJDF +5+eRt3CQ8ePhblGR1EOk1Rfa9WmP/WSFK/dv4/SkpwVOv8BpZArgYt6WfSOBrfm0 +Co+BvSZ6RzUGo7qNTLqff4TerMlR3EFXEEC6Hc+HbvI4vA+QY1s0rM1a49cybi98 +OgaE3UBj354EzNROV9cAmGmqcnF3aE5B+a5iyHVXhApgomhFVEFjsEL71OT78Ebt ++6dWO5dKnbfrIebwU6q0y/hCl8bGI6ROFVsnWMNcOJWtGOZ7awN9L3ZWHofABuAD +2lTb+Okn2hg1riFX1zxt3GK39q6NGz8Zvp5jPLDFCdiFJayYaoPyVWrs9s7PXMWU +2m3kw4vxMGfSWG1oJMVTPY6KYNSu7b//FxiC1zzqRPsI9HVHp+IfpnSsVXCZ0Sxg +PdSRT+lnFNRbwoU+JXO2eGCzVkOKNIIdWf5ftIpZR0uUf8kWAX0MM7cEUnlcObpB +EEiQE3UTpGUGKDBJYKzcMOkF8gECTLz9JfpMFikxbKSxU7NHwUBEIkHxdPnt4olW +W+8wIy537TsElk2A3VgomVHUoRMy0OtPIwCCjIkCMwQQAQoAHRYhBHxK/WHYqudX +B5alFyIJ1pAvlpyVBQJeaKjjAAoJECIJ1pAvlpyVrqYQAI3P6J8zC8Iqxg/zyTQ8 +0hHUSaJCUxTnrhJZYH4IqgsKMBr0YwGwSvD5TKlausFNHzXzFyP63QzTZuvbYI50 +o3zK2mYxYQNH+QK49qqOZsO8osYDbSHv4Uercqc+gJAyAjnkio48ODca/auXlmd9 +5y/7g/WQ9mfpO5lDZShzDzrifum2CAEHYC/I1TDKNZJUgU7b3A8QA2eWO7zl4vHl +D4JFQCKuti47gHNrnOdZON3YTbXuzPRbAwA/gA3kK5Id+BzSNpeC0xvrN+ppitV4 +Blo7vKs9hKG1p0wiwLL4HZTltet/5EjWT0yKcJejesKZGa6ItwrQZcWEZhTvj/T5 +2Ffrn/g+vz9NUL4EcF5FdxFJrJDkc6B9uu2nyHammgvD1+rT3sBA1N9OxSZ1SL+h +/t6YcwS+L0G/FH2dy1XoG/BlKi1z2hLOlQTq+UboHWdKg3mGOWEXDInZedRjXHNt +Ew9Sdxsb3z+ahDgsoe8+DlF53XM32QZqjL4nrIlJe5jVJk+HdTRK+q2HAlp+6SrC +gDpNIgk2HPBfQB33BBjLIHkxoelkZK6Sao18SHk/uw8d9nCIax6/CQzj6RK7qeK4 +XCtMOEK63IlMHlAv7Kwk76CPRVpmxcHVg7DGTZIJ4fz3I8XwL0GkGhkVAGvpNHUN +nECXjNHbjdeQ5qHTWEtBk2G8iQIzBBABCAAdFiEEwnA4SKpKeDqYSLsGVqM9nLZS +GGkFAl5w3GgACgkQVqM9nLZSGGlJMBAAv4KjxfDOr2/ac1b033t9zrh7/kxHWb5Q +1kQsng+t6UqdJOeQw5IWb00Zrkckrn7y8IQLiMcUZO7mr5k0FyKf3IcDFCwDd515 +gGyKXkUywmCxhFqyXIFFVbUEmMqoLl+ulMkDxHms3wSilt/t1Sfj27qmcoSwXNTk +Sps3pG4X6bMgVo/geTLfrtDewasCYm6XAEVUh+IQ1uwuMc+C1UxRYCJN+ECL9sUz +BQXpe1vF/wtU44sThB4KsrI51Qu++UXeVSAxPPEZ38v3qFif1FaMP/zkme2qB3Gh +6+c1c45guJkvxWoWm3GfeSdByiQ7tvMLjhUr8P61JaR1FHqNocJOBEEcAtreGE48 +KyVjG+W59xk+gHhOwJo7DpvBGLaDnDzQz0qZx3dwtoyTjA2BYy3aJXylujOS96yK +OXL/K8R8BMmWasDci9YjjoyD4POhGe+/KQnEQegmomu1Fhb2JNjKtpGY3bCcDmhq +r9aSv8ndeCi/hTUUohIYU9gdoUfb03e6n0VEU0BANxKZhdqn1dZdk0gbYwud57Qy +zvVCE28o0lgX1MezkT0ljRjnQtQagGQWXpf6ORBfJsqm5/BgV8VTtwRggjUYQtnw +Eicd/NKEXS/8maD1cOQTQlIkYmSNY9OproP4j0P8xxSJkPlBFe78s5bwTh6a1Vlf +EwIjR+GLUAWJAjMEEAEIAB0WIQTzagbUDxpvV4RJl2MUxAXJcZI1UwUCXmiyQgAK +CRAUxAXJcZI1U8qJEADIBlTs3i6v0SmcrrN09C+9bQFmAV2FfQiRKORDD8KFtYdt +cykTe2ky5yj0n9imBG2vo4VhSdXWF9QpQMX1RCFbEw6rnnsjE+I6LhIKT6WV87GU +pTCQ/nmu/Emsz93CSNTiirxVStEt9ziZgT8uAFpDaz8ZMs0k7+8ijthHnDePNls+ +BfwKcQYVfg5sMOcJpM9bO7wmP8nJB0jJMLjw0xfvj8p5oCX7c9P3XxsnE/LEW+8v +Uz1BVS2om8B0IuZevx/WXX7FiDN9QdGnEDWmsHM/HDgFl377djoFbsBG/WiIwa4I +6dGoBj+bk9JupUcwhyUpC+UVeRo26AvHURxa3wTKS/y9eG4taZVs5JS/VAQ5Nrrq +QdFLiArd6wC9Z2kbYv2FL1Vczq+dmQVnxbWmkmQ6b/zfKvirUP/nfYL+4kds82Tz +yvCqiytw4PYi5qYtDPrxEKCOXltXRtBN2JhF10Y4Q+ubfvNtYuCG9qasJupAnlP9 +ISDg4nPW6+Uec0joqZBD4cLRIxLC8fiZCTFDSfrvVU5es0kRcjodd3Aa9zhpU2/8 +rUD+ib7EACId5cXGkrO1QQNj6FqoYWNRuvgIW49ZqLnHjvTDhgfw9/K0rLxDrIQi +VxgRGhEZUNVUI+6CoEajgQFuTliAN3usYOl2RRWHALgvfa+Yx/AEoXkVSp4ey4kC +VAQTAQoAPgIbAwULCQgHAwUVCgkICwUWAgMBAAIeAQIXgBYhBCurRF+5tPDTMOR8 +sLIF5purL9kiBQJiF5QQBQkHcnlaAAoJELIF5purL9kivzcP/13I5uELda07WFtP +ieVP5IIK8OmzNTppauOxQfES+EBJvQ1tvijwfrvz64WY3TkEfvVlBfhuNyG3jx4B +4rD+K62a4gj1r3fUJyR6hZ0EGUGUquTj7ESLGkZ4aPItYp61pPhoOl7qTAWyMaQu +V3xPmcI2Vh87+7yAHUuqTLjwsAWWhpvJoidzgeQp2Y1LQg5XoNJ/+8qQ35uBuPf9 +tQxQ436FjQFQeEw4PEg7r8azmJWuHj7RHuSE5Xt4dyD73X9KwfqwCqHIx1zXGo7k +2H66LLudSwt/nUVzaGxQh/AASO5vGHR62aPkqILAP8k7S/ofWbMumuaacz6FDuQC +p6OkQVF7OVmnr0zMN1TG3+qEUQVyPhixjL5vUMgZUHP1ESOzcqjIfkwH/i4PTi/4 +7mevl18vwv85R0D/oo2CiLrWUvRVZimFzvAeXXSdxTK2PflFIiatHqaiLaNdcDcX +i4MrICMKnm5u4rrmwt2CldEwYOvgiPHL/uc2iLc73uLslHFpWs9gb9eViPtoE60f +V3scHkFTtlLy3qDXK1nYurQqdsKdxmiVhM6JChD8JrqTwJMB6FGA8QpNkTLfVpz2 +l1uBeYOLakXG5f1MORQqUpRLe3QKCIdPS4R2acic30HZ6c4V0Jjd5BxcWW/gBYmB +KRTb0sZRKvzBDz8LMf6AE+hKDRGUuQINBF5ngbYBEADnTxz05oMoMbJ89JGGTZ1I +aRtF0Puypxx4m0hEKLF4xLc+Dpav3kgvXurvfRyk/fzRcwcxvD6B2ifUiGxBWCoC +QDlPjHzC2zn3tX2BEXVuam/HnoCv+vwEvj8W4FldwsYK/NDyog+KLK5FyA2DEP7k +cqf3BQKJR6oQYWlxL/TNFbdswOUf/N2n7cYh7Bp+H3ZRTkhoAqMyoaWuSOE8Plpl +hVE03LWouW7JoXpLfB7/sIBWh+dfyLqJa4HBk7fh+j6hy8WzwhAbUJ/bQBIuAmXE +EyK149blXa6CLDwnDFDbnmjPeCFkMplwTp41BZksUog4HvLvzvHWkEl663YB1ddm +gg4A2DOMDlaICclppcTf1k3l2Igjc5vZcj/31q1QirWTOmA06D9NPy5sYmyx96cA +IP2Wgw+QigHC21F4/XiA9CccKWihvT59rgJKO9mNsBdNZAMBEfU3R4W1yZl2GJYx +CrvNHC7mOQA4gXXazvwnGnhTJckh2aE5nAcD4KeCVPyqnSdKRedvvMED+yA7+2CM +udbHMTPx5KwMky8uiDb7m9fOumoQG/xs+0MNPMCrIlcl6wNHoZZZQUSrRvEAnXdz +DpDMzj9uAWCIio8LJW8cxrqsFUsZR3X+2N0GaPouvTf5ooPDiIWKdebKUgyl7q7g +EcxsTWZqgXpBa5e6ypU6nQARAQABiQI8BBgBCgAmFiEEK6tEX7m08NMw5HywsgXm +m6sv2SIFAl5ngbYCGwwFCQPCZwAACgkQsgXmm6sv2SJPKw//c4bJE2tRANfr8rNj +ceh6M1xqU/Q2M5MQs9FfAM60RxKSnHmdDsaMOy7IoBEIlG3l70Wh/B3s8w8tWWVE +JtcF56jlgUPlDIF8+fQixw9G8wNbUdhuW01QXAuzcG4N5BfJULMzIwWKaWDYLGEa +MPu3g5OxacAwFfb4P0oN2McY1XzFEK8am9Oc578sK9U4Ab9AJaEgdMs2E/HgBtr4 +UR6i4lhwN7vSzfdwsVllZaJlUxlI6pT+qrizVX/rORGf7dNIOeqxJ2eWbvfsblw/ +j/667HeCBz9sdLwG7gsFNMHFPJavEIMaqpV+Msgc7zFRxLNp5F0elBVyLSeLrr9l +P6DpZOQPA3MA6fT0gXW4DkDYL8vozyosa4/ywZsk4CNTnDXSxv6SSPsY2X0UVRA7 +ZxTJRgYdjuTCG3AVnrdmRyEN9bRDZXk+EUbS6bYYa+eMD81AeuW5C2XfJkhPmOqM +uBZDU3Fp5kWGCLgp8fzS+arY05KGPgcxvSq2G5IjIvOvWhX+AND3UJrndCnp0xiD +ASvQnykc4SwRGbZH/+4g0F7ftjkJ5o4hzNTweG6hvX1mucweP8065e0fp+SC0tDA +1RxOePsEz6ZSLwKcR1brFUX5fEz+Wrs46pqC2yYLaXttDIFSP9VeqIFxIQCC9uPm +TNnIEAxMrGOJ+4Zwj2oEGwnkm/OJAjwEGAEKACYCGwwWIQQrq0RfubTw0zDkfLCy +Beabqy/ZIgUCYheUGgUJB3J5ZAAKCRCyBeabqy/ZIoRrD/0bRJXURnZWuuC6bWjx +15rAZUzaiQOpyjqqjLUerkBEwLui4eoI7CiazENiK/sy9VzrM06RA1s2JYSRpWzX +sVKHU59sToK715pI03W+U9m1PwpVve7kEOdYH+6g+v7xyPiaV0PlsA27kXAmMqmA +OVZWwDHOAemVVgtraB2zncAxnQdb+fw+7DYbFYnTXHCeKLlQHDU71iPGlh6GIKCu +8dxWYwNY91IfIQJrEjre3cyOKV9jT5gQ59EovAk3hiJK6d84daCkfeZumwaRQylJ +PbBQhJSKThJRWJFsRdPtXtse+28RxNXs50b1zHm0CTn5wlWzZmkD6R/yB4gQOZ9J +tpHkE79zS+Vnmm5XvWMY12TJ18f/OdWho+q01Z08BUbujBd7KReYZBwo4L7IGxDN +vnaa/hKQJNIDNzMdRqo7SADiQ2yWnSRyrbkMEqROpYdmM0L1WsmcZ8v33RWqXP+D +v1LlOUNqwFdfLqJgIEFZWEqlA7Y3PZyj9TovkgibRjQfulyfqg5li0s6IHd0P/Lh +ynlYsRud83XXsaURCsntDgcff25cPN6I7Z0sub/wX7I1huUsVW71ieoQ+8GS3ixL +KrLmnLA++bGZsMqAeGIY3433sANf3c9wUQukwVQIYhF4BnYJkgdKmbqujMq/xnlG ++f411w86UnMCtEt7KiE6JIj+pA== +=8rWG +-----END PGP PUBLIC KEY BLOCK----- diff --git a/suse-build-key.changes b/suse-build-key.changes new file mode 100644 index 0000000..dc80c91 --- /dev/null +++ b/suse-build-key.changes @@ -0,0 +1,340 @@ +------------------------------------------------------------------- +Fri Jul 19 08:47:17 UTC 2024 - Marcus Meissner + +- make the per-project inclusion optional, default off. + +------------------------------------------------------------------- +Thu Jul 18 12:13:36 UTC 2024 - Marcus Meissner + +- also include the GPG key from the current build project + +------------------------------------------------------------------- +Thu Mar 7 10:19:49 UTC 2024 - Marcus Meissner + +- switch the container key to the new 4096RSA key by default +- obsolete the 1024bit RSA key from SLES 11, so it gets deinstalled + from migrated systems. + +------------------------------------------------------------------- +Mon Oct 16 08:55:24 UTC 2023 - Marcus Meissner + +- build-container-d4ade9c3-5a2e9669.pem: added missing current + PEM container key. +- install the PEM files to the container dir, not the .asc files + (bsc#1216203) + +------------------------------------------------------------------- +Tue Sep 12 10:08:56 UTC 2023 - Marcus Meissner + +- remove gpg, fileutils, mktemp, sh-utils requires as they are not + needed by the package main functionality, but only by dumpsigs. + +------------------------------------------------------------------- +Mon May 15 09:44:20 UTC 2023 - Marcus Meissner + +- updated with all current changes + - gpg-pubkey-3fa1d6ce-63c9481c.asc: Upcoming SLE RSA 4096 bit signing key. + - gpg-pubkey-25db7ae0-645bae34.asc: New SLE RSA 4096 bit backup signing key. + - gpg-pubkey-09d9ea69-645b99ce.asc: New ALP RSA 4096 bit signing key. + - gpg-pubkey-73f03759-626bd414.asc: New ALP RSA 4096 bit backup signing key. + - suse_ptf_key.asc: switch to use current RSA 2048 bit key + - suse_ptf_4096_key.asc: upcoming RSA 4096 bit key for SUSE PTFs. + - build-container-8fd6c337-63c94b45.asc: New SLE RSA 4096 bit container signing key (GPG format). + - build-container-8fd6c337-63c94b45.pem: New SLE RSA 4096 bit container signing key (PEM format). + +------------------------------------------------------------------- +Fri Jun 11 09:49:11 UTC 2021 - Dirk Müller + +- remove dumpsigs for SLE12+ (rpm 4.x) (bsc#1186827) + +------------------------------------------------------------------- +Mon Sep 21 08:30:03 UTC 2020 - Marcus Meissner + +- suse build key extended (bsc#1176759) + gpg-pubkey-39db7c82-5847eb1f.asc -> gpg-pubkey-39db7c82-5f68629b.asc + + +------------------------------------------------------------------- +Thu Aug 13 09:32:26 UTC 2020 - Marcus Meissner + +- actually the container key is different from the build signing + key. (PM-1845 bsc#1170347) + +------------------------------------------------------------------- +Thu Apr 23 13:32:45 UTC 2020 - Marcus Meissner + +- add a /usr/share/container-keys/ directory for GPG based Container + verification. +- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347) + +------------------------------------------------------------------- +Wed Mar 11 09:09:42 UTC 2020 - Marcus Meissner + +- created a new security@suse.de communication key (bsc#1166334) + +------------------------------------------------------------------- +Tue Nov 13 12:41:24 UTC 2018 - meissner@suse.com + +- include ptf key in the key directory to avoid it being + stripped via %doc stripping. (bsc#1044232) + +------------------------------------------------------------------- +Wed Mar 28 14:56:15 UTC 2018 - meissner@suse.com + +- created a new security@suse.de communication key. (bsc#1082022) +- extended the PTF key and the SLE10 build@suse.de key. (bsc#1085512) + +------------------------------------------------------------------- +Wed Dec 7 16:35:05 UTC 2016 - meissner@suse.com + +- extend the build@suse.de product key. (bsc#1014151) + + pub 2048R/39DB7C82 2013-01-31 [expires: 2020-12-06] + uid SuSE Package Signing Key + +------------------------------------------------------------------- +Tue Nov 29 12:54:46 CET 2016 - ro@suse.de + +- use dumpsigs script from openSUSE to merge code + +------------------------------------------------------------------- +Thu Oct 2 12:45:05 UTC 2014 - meissner@suse.com + +- renamed security_at_suse_de.asc to security_at_suse_de_old.asc +- security_at_suse_de.asc: new 4096 bit RSA key. + pub 4096R/317CD502 2014-10-02 SUSE Security Team + bnc#899509 + +------------------------------------------------------------------- +Fri Aug 29 08:28:03 UTC 2014 - meissner@suse.com + +- Went to new method again. + - suse-build-key.gpg blob dropped + - ship seperate files + +------------------------------------------------------------------- +Mon Feb 10 09:57:50 UTC 2014 - meissner@suse.com + +- create suse-build-key.gpg during build. +- Remove old keys from keyring. (fate#314767) + Keys currently inside the RPM trusted keyring: + - pub 2048R/39DB7C82 SuSE Package Signing Key + - pub 2048R/50A3DD1C SuSE Package Signing Key (reserve key) +- Various keys are moved to the documentation area + (/usr/share/doc/packages/suse-build-key) + - build-at-suse-sle11.asc: the old SUSE Linux Enterprise 11 key. + if SUSE Linux Enterprise 11 packages need to be verified on + a SUSE Linux Enterprise 12 system. + - suse_ptf_key.asc: The suse ptf key. For verification of provided PTFs. + - security_at_suse_de.asc: Use only for email encryption and + verification purposes when contacting our security contact address + security@suse.de + +------------------------------------------------------------------- +Mon Jan 13 15:01:24 UTC 2014 - meissner@suse.com + +- reverted to contain the fullkeyring build SLE12 Alpha. +- also list the old sle11 build@suse.de key temporary + +------------------------------------------------------------------- +Thu Jan 9 12:29:53 UTC 2014 - meissner@suse.com + +- Merged over logic from openSUSE-build-key. +- Got rid of default importing into roots keyring. +- Removed some old keys. +- Clarify that security@suse.de is a email only key +- PTF key is supplied also as %doc, to not be default + imported. +- Keys currently inside: + - pub 2048R/39DB7C82 SuSE Package Signing Key + - pub 2048R/50A3DD1C SuSE Package Signing Key (reserve key) + - pub 1024D/B37B98A9 SUSE PTF Signing Key + - pub 2048R/3D25D3D9 SuSE Security Team + +------------------------------------------------------------------- +Thu Jan 31 17:11:08 CET 2013 - ro@suse.de + +- added future signing key for SLES (fate#314767) (bnc#801055) + using 2048 bit rsa key + +------------------------------------------------------------------- +Mon Jan 14 01:55:36 CET 2013 - ro@suse.de + +- added reserve key for SLES (fate#312896) + 50A3DD1C SuSE Package Signing Key (reserve key) + valid until (2017-01-13) + +------------------------------------------------------------------- +Sun Oct 21 23:03:01 CEST 2012 - ro@suse.de + +- export keys to single files in /usr/lib/rpm/gnupg/keys + +------------------------------------------------------------------- +Mon Dec 12 12:02:49 CET 2011 - ro@suse.de + +- reduced key list. remaining keys: + 307E3D54 SuSE Package Signing Key + 3D25D3D9 SuSE Security Team + 9C800ACA SuSE Package Signing Key + B37B98A9 SUSE PTF Signing Key + +------------------------------------------------------------------- +Fri Jan 28 13:02:42 CET 2011 - ro@suse.de + +- if we have to set $HOME, we also have to export the variable + (bnc#665912) + +------------------------------------------------------------------- +Tue May 4 16:11:41 CEST 2010 - ro@suse.de + +- updated keys: (bnc#600157,bnc#599167) + - 307E3D54 build@suse.de "SuSE Package Signing Key" (2014-05-03) + - 9C800ACA build@suse.de "SuSE Package Signing Key" (2014-05-03) + - B37B98A9 support@suse.com "SUSE PTF Signing Key" (2014-05-03) + - 7E2E3B05 novell-provo-build@novell.com "Novell Provo Build" + (2014-05-06) +- added keys: + - 1D061A62 support@novell.com + "build@novell.com (Novell Linux Products)" (2014-05-06) + +------------------------------------------------------------------- +Fri Oct 31 14:28:18 CET 2008 - ro@suse.de + +- added ptf key, expiring 2010-07-02 + +------------------------------------------------------------------- +Mon Jun 2 15:45:33 CEST 2008 - ro@suse.de + +- update keys again: for collaboration with rpm, the current + self-signature needs to be the first signature found in a key + +------------------------------------------------------------------- +Mon May 5 18:31:20 CEST 2008 - ro@suse.de + +- updated keys + 9C800ACA,8495160C,307E3D54: extend expiration by 2 years + until 2010-05-05 + 7E2E3B05: extend expiration by 2 years until 2010-05-24 + +------------------------------------------------------------------- +Mon Mar 19 16:49:05 CET 2007 - rguenther@suse.de + +- merge suse-build-key keyring to roots gpg pubring + +------------------------------------------------------------------- +Mon May 29 17:20:45 CEST 2006 - ro@suse.de + +- added new official provo dsa autobuild key ID 7E2E3B05 + +------------------------------------------------------------------- +Fri May 19 14:02:59 CEST 2006 - ro@suse.de + +- removed unused provo autobuild key +- added new official provo autobuild key ID A1912208 + +------------------------------------------------------------------- +Thu Apr 20 12:47:18 CEST 2006 - ro@suse.de + +- add dumpsigs script here to have _one_ place for the script + +------------------------------------------------------------------- +Fri Mar 31 16:53:02 CEST 2006 - ro@suse.de + +- added build@suse.de rsa key ID 307E3D54 + +------------------------------------------------------------------- +Wed Jan 25 21:47:54 CET 2006 - mls@suse.de + +- converted neededforbuild to BuildRequires + +------------------------------------------------------------------- +Tue Oct 18 17:47:07 CEST 2005 - ro@suse.de + +- use correct provo autobuild key + +------------------------------------------------------------------- +Tue Oct 18 12:28:04 CEST 2005 - ro@suse.de + +- added provo autobuild signing key (#128128) +- removed jds key + +------------------------------------------------------------------- +Fri May 27 14:47:30 CEST 2005 - mls@suse.de + +- added mktemp to PreReqs [#86177] + +------------------------------------------------------------------- +Thu Apr 28 11:45:36 CEST 2005 - ro@suse.de + +- added JDS public key (15c17deb) + +------------------------------------------------------------------- +Tue Jan 25 18:10:26 CET 2005 - ro@suse.de + +- added OES public key (0dfb3188) + +------------------------------------------------------------------- +Tue Jun 22 12:28:07 CEST 2004 - ro@suse.de + +- updated build key (expiration changed to 2008-06-21) (#42326) + +------------------------------------------------------------------- +Tue Feb 24 12:19:49 CET 2004 - hmacht@suse.de + +- building as non-root + +------------------------------------------------------------------- +Tue Sep 9 18:51:02 CEST 2003 - ro@suse.de + +- ignore return code from first gpg calls + +------------------------------------------------------------------- +Tue Sep 9 18:23:07 MEST 2003 - draht@suse.de + +- call gpg twice without any arguments for proper initialization + inside postinstall + +------------------------------------------------------------------- +Tue Sep 9 17:43:55 MEST 2003 - draht@suse.de + +- use temp file instead of pipe due to resource race between two + instances of gpg in %post. + +------------------------------------------------------------------- +Thu Sep 5 04:56:32 CEST 2002 - draht@suse.de + +- package now installs key from package-owned file into the rpm + pubring in %post to allow other key packages to add their keys. + +------------------------------------------------------------------- +Tue Aug 20 10:46:52 CEST 2002 - mmj@suse.de + +- Correct PreReq + +------------------------------------------------------------------- +Fri Jul 26 09:50:14 CEST 2002 - kukuk@suse.de + +- Change Provides from suse-build-key to build-key + +------------------------------------------------------------------- +Thu Feb 21 00:10:52 MET 2002 - draht@suse.de + +- directory permission problem: 644 -> 755. + +------------------------------------------------------------------- +Mon Feb 18 12:16:34 CET 2002 - ro@suse.de + +- moved to /usr/lib/rpm/gnupg/pubring.pgp + rpm needs a directory as gpg_path and will use pubring.gpg + in that directory + +------------------------------------------------------------------- +Wed Feb 13 20:45:46 MET 2002 - draht@suse.de + +- initial package. Contains + - pub 2048R/3D25D3D9 1999-03-06 SuSE Security Team + + - pub 1024D/9C800ACA 2000-10-19 SuSE Package Signing Key + - sub 2048g/8495160C 2000-10-19 [expires: 2006-02-12] + + diff --git a/suse-build-key.spec b/suse-build-key.spec new file mode 100644 index 0000000..def720e --- /dev/null +++ b/suse-build-key.spec @@ -0,0 +1,173 @@ +# +# spec file for package suse-build-key +# +# Copyright (c) 2024 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# +# needspubkeyforbuild + + +%bcond_without build_key_include_prjkey + +Name: suse-build-key +BuildRequires: gpg +Provides: build-key +Summary: The public gpg key for rpm package signature verification +License: GPL-2.0-or-later +Group: System/Packages +Version: 12.0 +Release: 0 + +Source1000: key2rpmname +# pub 2048R/39DB7C82 2013-01-31 SuSE Package Signing Key +# The main package signing key. +Source0: gpg-pubkey-39db7c82-5f68629b.asc +#pub rsa4096/0xF74F09BC3FA1D6CE 2023-01-19 [SC] [expires: 2027-01-18] +# Key fingerprint = 7F00 9157 B127 B994 D5CF BE76 F74F 09BC 3FA1 D6CE +#uid SUSE Package Signing Key +Source4: gpg-pubkey-3fa1d6ce-63c9481c.asc + +# pub 2048R/50A3DD1C 2013-01-14 SuSE Package Signing Key (reserve key) +# Fallback key if main key gets lost. +Source1: gpg-pubkey-50a3dd1c-50f35137.asc +# new reserver key RSA 4096 bit +#pub rsa4096/0xA1BFC02BD588DC46 2023-01-19 [SC] [expires: 2033-01-16] +# Key fingerprint = B56E 5601 41D8 F654 2DFF 3BF9 A1BF C02B D588 DC46 +#uid SUSE Package Signing Key (reserve key) +Source9: gpg-pubkey-25db7ae0-645bae34.asc + +# pub 1024R/307E3D54 2006-03-21 SuSE Package Signing Key +# SLES 10 key. +# Source2: gpg-pubkey-307e3d54-5aaa90a5.asc +# deinstall the old RSA 1024 bit key from SLES 11 . +Obsoletes: gpg-pubkey = 307e3d54 + +#pub rsa2048/0x8EFE1BC4D4ADE9C3 2017-12-11 [SC] [expires: 2027-12-09] +# Key fingerprint = 0EE9 CA43 0050 9E29 17A0 54ED 8EFE 1BC4 D4AD E9C3 +# container key used by Container TUF style signing. +Source3: build-container-d4ade9c3-5a2e9669.asc +# same, in PEM format +Source10: build-container-d4ade9c3-5a2e9669.pem + +# New ALP Keys +#pub rsa4096/0xFEC28EAF09D9EA69 2023-05-10 [SC] [expires: 2027-05-09] +# Key fingerprint = 1C59 D66F CD52 563A 1693 3DBC FEC2 8EAF 09D9 EA69 +#uid ALP Package Signing Key +Source5: gpg-pubkey-09d9ea69-645b99ce.asc +# reserve key +#pub rsa4096/0xC7B81E4373F03759 2022-04-29 [SC] [expires: 2032-04-26] +# Key fingerprint = 5056 7568 F292 0FF1 65B2 5FB2 C7B8 1E43 73F0 3759 +#uid ALP Package Signing Key (reserve key) +Source6: gpg-pubkey-73f03759-626bd414.asc + +# new 4096 bit SLES container key. +#pub rsa4096/0x100CEB438FD6C337 2023-01-19 [SC] [expires: 2027-01-18] +# Key fingerprint = 2BFA 4649 1A1C FFA8 31EF C4B6 100C EB43 8FD6 C337 +#uid SUSE Linux Container Signing Key +Source7: build-container-8fd6c337-63c94b45.asc +# Exact same key in PEM format for notary and cosign +Source8: build-container-8fd6c337-63c94b45.pem + +# SUSE supplied PTF (program temporary fixes) are signed by this key. +# supplied to be not imported by default +#pub rsa2048/0x46DFA05C6F5DA62B 2022-02-25 [SC] [expires: 2026-02-24] +# Key fingerprint = 1604 494D 38DA 2FA7 AA26 97AE 46DF A05C 6F5D A62B +#uid SUSE PTF Signing Key +Source97: suse_ptf_key.asc +#pub rsa4096/0x09461C70AF5425F7 2023-01-19 [SC] [expires: 2027-01-18] +# Key fingerprint = 6D6C 8072 BF35 2152 3062 D823 0946 1C70 AF54 25F7 +#uid SUSE PTF Signing Key +Source98: suse_ptf_4096_key.asc + +# Use only for email communication! +#pub rsa4096/0xB205E69BAB2FD922 2020-03-10 [SC] [expires: 2024-02-24] +# Key fingerprint = 2BAB 445F B9B4 F0D3 30E4 7CB0 B205 E69B AB2F D922 +#uid SUSE Security Team +#uid SUSE Security Team +#sub rsa4096/0xA679ED66FD417627 2020-03-10 [E] [expires: 2024-02-24] +Source99: security_at_suse_de.asc + +Source100: dumpsigs + +BuildRoot: %{_tmppath}/%{name}-%{version}-build +BuildArch: noarch +%define keydir %{_prefix}/lib/rpm/gnupg/keys +%define containerkeydir %{_prefix}/share/container-keys/ +%define pemcontainerkeydir %{_prefix}/share/pki/containers/ + +%description +This package contains the gpg keys that are used to sign the +SUSE rpm packages. The keys installed here are not actually +used by anything. rpm/zypper use the keys in the rpm db instead. + +%prep +%setup -qcT + +%build +cp %SOURCE98 . +cp %SOURCE99 . + +%install +rm -rf $RPM_BUILD_ROOT +mkdir -p $RPM_BUILD_ROOT%{keydir} + +%if %{with build_key_include_prjkey} +if [ -e "%_sourcedir/_pubkey" ]; then + name="$(sh %{SOURCE1000} %_sourcedir/_pubkey).asc" + if [ ! -e "%_sourcedir/$name" ]; then + install -D -m 644 %_sourcedir/_pubkey %{buildroot}%keydir/"$name" + fi +fi +%endif + +for i in %sources; do + case "$i" in + */gpg-pubkey-*.asc|*/*ptf*.asc) + install -m 644 "$i" $RPM_BUILD_ROOT%{keydir} + ;; + esac +done + + +%if 0%{?suse_version} && 0%{?suse_version} < 1120 +install -m 755 %{SOURCE100} $RPM_BUILD_ROOT/usr/lib/rpm/gnupg +%endif + +install -d -m 755 $RPM_BUILD_ROOT%{containerkeydir}/ +install -c -m 644 %{SOURCE3} $RPM_BUILD_ROOT%{containerkeydir}/suse-container-key-old.asc +install -c -m 644 %{SOURCE7} $RPM_BUILD_ROOT%{containerkeydir}/suse-container-key.asc + +install -d -m 755 $RPM_BUILD_ROOT%{pemcontainerkeydir}/ +install -c -m 644 %{SOURCE10} $RPM_BUILD_ROOT%{pemcontainerkeydir}/suse-container-key-old.pem +install -c -m 644 %{SOURCE8} $RPM_BUILD_ROOT%{pemcontainerkeydir}/suse-container-key.pem + +%files +%defattr(644,root,root) +%doc security_at_suse_de.asc +%attr(755,root,root) %dir %{_prefix}/lib/rpm/gnupg +%attr(755,root,root) %dir %{keydir} +%attr(755,root,root) %dir %{containerkeydir} +%if 0%{?suse_version} && 0%{?suse_version} < 1120 +%attr(755,root,root) %{_prefix}/lib/rpm/gnupg/dumpsigs +%endif +%{keydir}/gpg-pubkey-*.asc +%{keydir}/suse_ptf_4096_key.asc +%{keydir}/suse_ptf_key.asc +%{containerkeydir}/suse-container-key.asc +%{containerkeydir}/suse-container-key-old.asc +%dir /usr/share/pki/ +%dir %{pemcontainerkeydir}/ +%{pemcontainerkeydir}/suse-container-key.pem +%{pemcontainerkeydir}/suse-container-key-old.pem + +%changelog diff --git a/suse_ptf_4096_key.asc b/suse_ptf_4096_key.asc new file mode 100644 index 0000000..e3ed665 --- /dev/null +++ b/suse_ptf_4096_key.asc @@ -0,0 +1,29 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v2.0.15 (GNU/Linux) + +mQINBGPJSdkBEACkTfGtZ9/KRx+AVxloccwZXCKlRhezNadNd3Y9eLZxG66edA6o +yTdTrWe30wL7iqYcU6m05X8Qv/q+GiNFsshSJl0cXoixlYDIztCpFgFWrNEwa3MU +aFTA8T/TZ6tAt+tZw/qrDdM3EZp1ogv39TgwEdIHq+GkmmqXLb5znTUMf3AhGqNA +y0Eb+CFKN5Ts7gAxs4gYriwzTUyHxmIwxPPzsfrTTB1ZC/fUNeCkYAYxBMcS4x46 +7pz6467FW6qtUSRLqz1ZRuSj3hqAwHuk1RXZHbJIbaKekRu5DTg48ru3+UdnJB4j +x8eHyUcayrz3wMMdNpXmlyx7oOGp0LIowHKSlfGInJNA44f6rKdhS702x6Cau9BV +1akQHZaXCnvItoxjwND3wBitXQFS0Fs8ShrztuBgnXRH1gLrITrkJ4PIn0rgEOSO +SmlcVottcqnABRE11qCgAEJ6pSekhLWQP2HXkzKDPHonbinQAqywlk2zQBy7ArwB +fCD9SGfnmcinYekqEvLK9m/BPu8YT7drbJSBAoo/XdGx+xhbNZjVEiNrBTM76aQt +GQXRzTpSlj6VQUMA3V0UV4XfIziLhoz708PPpI2BNUB7D6sdGXSN7/gPw/EDiNuL +/vnrdsFa3/XtMqRok3qTmpTghxB32OR5u4wgRUv6Ni4j1VbIRpeGO8w55QARAQAB +tCdTVVNFIFBURiBTaWduaW5nIEtleSA8c3VwcG9ydEBzdXNlLmNvbT6JAj4EEwEC +ACgFAmPJSdkCGwMFCQeEzgAGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJEAlG +HHCvVCX3TgMP/06EnP3dIR4MywYY0AZ16iR5VFArL5Kfp+Mv+t1JPrKkI782O/F4 +vtCwGFK4q45/smV+YmQ131cyv7tMX9YKTnbOrkvbqhtEaVScZrfFIQiXs4Asf3aP +ImCYS/pLkpvJ89TobyfnTZQ38YZE8cXHawdp3j1wQ1hZirNn3MGDXn2H50iacH4u +7P31OmlnJW8QMoOiZjONJVCcaoXYv7QSsQKHlQ+UHSbW9Nlqub0XC2rPu+lFHf30 +/qPa4iDfP26jhapjsC7hKWgUBMWnX8rvkHPDMndDZJjU+8MmehRQ1BaWsZKQ5cJ7 +hFXiELrv0St/58scYwD0bWTO/CvmhI1+NLrLAfxhaL+CAr4pFcZRjgYvYjsoNCgs +Vh7+DIIXxgK1eNrHZwtdHA/UHBiNhU7IKPY6acn/iQlVxXoVU8Ic7QaS3XQFLgP5 +TXzwD/MxRUabhkbwRA43crReRKHd11IjFrz/GvAFJXzYi1OtCTKcQX0KKwiQy/Hc +TPQw7wbGEsrK+aS5ZWQS7sGHeUnMsx7bItk9q8Q6E7w6Ey8XscgWkNnrPLwJdOAZ +QW4RfFbcEArO2EF62fqwxJhtDOO1M9LTUiqXNTyieOhyfGy/ZAGFc8zFg88IV3Ne +Levr6KJrwMjKLHYZtSx1pOobcsA3vn784SKVLPdOo+c0szJZ6uhGzSeW +=3619 +-----END PGP PUBLIC KEY BLOCK----- diff --git a/suse_ptf_key.asc b/suse_ptf_key.asc new file mode 100644 index 0000000..747cd09 --- /dev/null +++ b/suse_ptf_key.asc @@ -0,0 +1,19 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v2.0.15 (GNU/Linux) + +mQENBGIYzssBCADJN/hpDHueuhfWHTik9KrUjQKZv/kwByISSQIWyuXW9WcmUbo/ +pYiPgCjq1xNX58Yw+Rh0BQet9QFUYWFhJqG/3lc38UHByM3Wq/3dEXHtNoQGosBb +zVQfDznD6EHuikU89+ErcX05suscA7og2YNMNl/Yt4v2VoFOqeKuvYGtRxcTzgHi +8xBbj6EN2X3XnsubddrCiwdoXKq/It0vGRcmez+1EVbAjQEasoIQkxtRzLDbwcfK +eM4vKyhQ+ziUe4jadp58VsvIbKxA+kfNegaHsYLn11cdUjc2o5eiPFWbERz1x2pE +gUUaVD8M8RJdllZbWKhmaI06+RZYbmiYTRlPABEBAAG0J1NVU0UgUFRGIFNpZ25p +bmcgS2V5IDxzdXBwb3J0QHN1c2UuY29tPokBPgQTAQIAKAUCYhjOywIbAwUJB4TO +AAYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AACgkQRt+gXG9dpiuboQgAuKKA7JmH +F4tiW5dacBPbNF3hjX4AH4amFn09WyvpjLodANpr5XI4guzykzaxPqeWUQNKC1gs ++Qg0NtskJ4sHHH1V7xR1OU0NFL/RTX9q8K1ICk0WaQE+GhLQm+IwCmF6SKnEGfro +iXbcHTDKtv4VlYRO9mYnRU2BJQpi7T82kWg5ipG2StRDJ355GPqp4ciul4hmSIuH +yX5MMc8yXZa7Wf/VALQTbcIva3oePaz4QJeg0sGL3SgoBIp+XCm1fNGfdoUpamLH +f3svFdbT1XlgXmhgU9K6hTiqD+qUIx2HWRq/15imY31cAeGVM8fBnr5s4UrPRjXH +jFIZZtawT40NLA== +=Du7L +-----END PGP PUBLIC KEY BLOCK-----