1
0
Commit Graph

68 Commits

Author SHA256 Message Date
Dominique Leuenberger
5d562006e3 Accepting request 1198027 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1198027
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=47
2024-09-02 11:13:40 +00:00
160f1ece1e - extended 2048 bit SUSE SLE 12, 15 GA-SP5 key until 2028. (bsc#1229339)
- gpg-pubkey-39db7c82-5f68629b.asc
  + gpg-pubkey-39db7c82-66c5d91a.asc

OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=53
2024-08-31 09:29:44 +00:00
Dominique Leuenberger
5d44700bd5 Accepting request 1190502 from Base:System
- ensure key2rpmname is called using bash.

This fixes build on SLE15SP7. (forwarded request 1190501 from epaolantonio)

OBS-URL: https://build.opensuse.org/request/show/1190502
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=46
2024-07-31 11:30:06 +00:00
371c0b79fa - ensure key2rpmname is called using bash.
This fixes build on SLE15SP7.

OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=51
2024-07-30 15:33:46 +00:00
Dominique Leuenberger
16fdd84901 Accepting request 1189743 from Base:System
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/1189743
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=45
2024-07-26 14:16:12 +00:00
87fd9c15ec OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=49 2024-07-19 08:49:58 +00:00
e389d7bea5 - make the per-project inclusion optional, default off.
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=48
2024-07-19 08:47:32 +00:00
Ana Guerrero
67aa0acacb Accepting request 1188398 from Base:System
- also include the GPG key from the current build project

OBS-URL: https://build.opensuse.org/request/show/1188398
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=44
2024-07-18 17:20:15 +00:00
736122ecf2 OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=46 2024-07-18 12:19:12 +00:00
6e6d317d2b - also include the GPG key from the current build project
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=45
2024-07-18 12:15:46 +00:00
Ana Guerrero
15bee61ba2 Accepting request 1156876 from Base:System
- switch the container key to the new 4096RSA key by default
- obsolete the 1024bit RSA key from SLES 11, so it gets deinstalled
  from migrated systems. (forwarded request 1156875 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/1156876
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=43
2024-03-11 14:34:43 +00:00
ce2ae62a67 Accepting request 1156875 from home:msmeissn:branches:Base:System
- switch the container key to the new 4096RSA key by default
- obsolete the 1024bit RSA key from SLES 11, so it gets deinstalled
  from migrated systems.

OBS-URL: https://build.opensuse.org/request/show/1156875
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=43
2024-03-11 08:46:23 +00:00
Ana Guerrero
271075a1fb Accepting request 1117951 from Base:System
- build-container-d4ade9c3-5a2e9669.pem: added missing current
  PEM container key.
- install the PEM files to the container dir, not the .asc files
  (bsc#1216203)

OBS-URL: https://build.opensuse.org/request/show/1117951
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=42
2023-10-16 20:33:23 +00:00
a4d1fa1658 OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=41 2023-10-16 09:09:15 +00:00
d5b82a6dd5 - build-container-d4ade9c3-5a2e9669.pem: added missing current
PEM container key.
- install the PEM files to the container dir, not the .asc files
  (bsc#1216203)

OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=40
2023-10-16 08:55:58 +00:00
Ana Guerrero
c8079c3c68 Accepting request 1110632 from Base:System
- remove gpg, fileutils, mktemp, sh-utils requires as they are not
  needed by the package main functionality, but only by dumpsigs. (forwarded request 1110631 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/1110632
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=41
2023-09-12 19:04:26 +00:00
e3f22483fc Accepting request 1110631 from home:msmeissn:branches:Base:System
- remove gpg, fileutils, mktemp, sh-utils requires as they are not
  needed by the package main functionality, but only by dumpsigs.

OBS-URL: https://build.opensuse.org/request/show/1110631
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=38
2023-09-12 13:52:12 +00:00
Dominique Leuenberger
e929e8d629 Accepting request 1088291 from Base:System
- updated with all current changes
  - gpg-pubkey-3fa1d6ce-63c9481c.asc: Upcoming SLE RSA 4096 bit signing key.
  - gpg-pubkey-25db7ae0-645bae34.asc: New SLE RSA 4096 bit backup signing key. 
  - gpg-pubkey-09d9ea69-645b99ce.asc: New ALP RSA 4096 bit signing key.
  - gpg-pubkey-73f03759-626bd414.asc: New ALP RSA 4096 bit backup signing key.
  - suse_ptf_key.asc: switch to use current RSA 2048 bit key
  - suse_ptf_4096_key.asc: upcoming RSA 4096 bit key for SUSE PTFs.
  - build-container-8fd6c337-63c94b45.asc: New SLE RSA 4096 bit container signing key (GPG format).
  - build-container-8fd6c337-63c94b45.pem: New SLE RSA 4096 bit container signing key (PEM format). (forwarded request 1088284 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/1088291
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=40
2023-05-22 11:14:35 +00:00
c74f4b86dd Accepting request 1088284 from home:msmeissn:branches:Base:System
- updated with all current changes
  - gpg-pubkey-3fa1d6ce-63c9481c.asc: Upcoming SLE RSA 4096 bit signing key.
  - gpg-pubkey-25db7ae0-645bae34.asc: New SLE RSA 4096 bit backup signing key. 
  - gpg-pubkey-09d9ea69-645b99ce.asc: New ALP RSA 4096 bit signing key.
  - gpg-pubkey-73f03759-626bd414.asc: New ALP RSA 4096 bit backup signing key.
  - suse_ptf_key.asc: switch to use current RSA 2048 bit key
  - suse_ptf_4096_key.asc: upcoming RSA 4096 bit key for SUSE PTFs.
  - build-container-8fd6c337-63c94b45.asc: New SLE RSA 4096 bit container signing key (GPG format).
  - build-container-8fd6c337-63c94b45.pem: New SLE RSA 4096 bit container signing key (PEM format).

OBS-URL: https://build.opensuse.org/request/show/1088284
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=36
2023-05-22 08:23:04 +00:00
Dominique Leuenberger
e71e54c024 Accepting request 904142 from Base:System
- remove dumpsigs for SLE12+ (rpm 4.x) (bsc#1186827) (forwarded request 903938 from dirkmueller)

OBS-URL: https://build.opensuse.org/request/show/904142
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=39
2021-07-05 20:23:19 +00:00
3b722e367c Accepting request 903938 from home:dirkmueller:branches:Base:System
- remove dumpsigs for SLE12+ (rpm 4.x) (bsc#1186827)

OBS-URL: https://build.opensuse.org/request/show/903938
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=35
2021-07-05 10:30:11 +00:00
Dominique Leuenberger
36e392b317 Accepting request 899890 from Base:System
This syncs from SUSE:SLE-15:Update. the slightly non-incremental
changelog can't be avoided. 

- suse build key extended (bsc#1176759)
  gpg-pubkey-39db7c82-5847eb1f.asc -> gpg-pubkey-39db7c82-5f68629b.asc

- actually the container key is different from the build signing
  key. (PM-1845 bsc#1170347)

- add a /usr/share/container-keys/ directory for GPG based Container
  verification.
- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347)

- created a new security@suse.de communication key (bsc#1166334)

- include ptf key in the key directory to avoid it being
  stripped via %doc stripping. (bsc#1044232) (forwarded request 899537 from dirkmueller)

OBS-URL: https://build.opensuse.org/request/show/899890
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=38
2021-06-14 21:11:09 +00:00
50aa13556b Accepting request 899537 from home:dirkmueller:Factory
This syncs from SUSE:SLE-15:Update. the slightly non-incremental
changelog can't be avoided. 

- suse build key extended (bsc#1176759)
  gpg-pubkey-39db7c82-5847eb1f.asc -> gpg-pubkey-39db7c82-5f68629b.asc

- actually the container key is different from the build signing
  key. (PM-1845 bsc#1170347)

- add a /usr/share/container-keys/ directory for GPG based Container
  verification.
- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347)

- created a new security@suse.de communication key (bsc#1166334)

- include ptf key in the key directory to avoid it being
  stripped via %doc stripping. (bsc#1044232)

OBS-URL: https://build.opensuse.org/request/show/899537
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=33
2021-06-14 07:37:37 +00:00
Dominique Leuenberger
584b85e9af Accepting request 669010 from Base:System
- add PTF key to the key directory, so it does not get stripped 
  out when using --exclude-docs (bsc#1044232)

OBS-URL: https://build.opensuse.org/request/show/669010
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=37
2019-01-28 19:49:42 +00:00
707ca598fe OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=31 2019-01-14 07:42:42 +00:00
a5c8555a7b - add PTF key to the key directory, so it does not get stripped
out when using --exclude-docs (bsc#1044232)

OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=30
2019-01-11 15:00:54 +00:00
Dominique Leuenberger
e7128f9cd1 Accepting request 621749 from Base:System
OBS-URL: https://build.opensuse.org/request/show/621749
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=36
2018-07-10 14:16:45 +00:00
36ab19068f Accepting request 621179 from SUSE:SLE-15:GA
boo#1100253

OBS-URL: https://build.opensuse.org/request/show/621179
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=28
2018-07-09 16:37:53 +00:00
Dominique Leuenberger
ee23ce2c28 Accepting request 518538 from Base:System
- extend the build@suse.de product key. (bsc#1014151)
  pub  2048R/39DB7C82 2013-01-31 [expires: 2020-12-06]
  uid                            SuSE Package Signing Key <build@suse.de>

- use dumpsigs script from openSUSE to merge code 

- renamed security_at_suse_de.asc to security_at_suse_de_old.asc
- security_at_suse_de.asc: new 4096 bit RSA key.
  pub  4096R/317CD502 2014-10-02 SUSE Security Team <security@suse.de>
  bnc#899509

- create suse-build-key.gpg during build.
- Remove old keys from keyring. (fate#314767)
  Keys currently inside the RPM trusted keyring:
  - pub  2048R/39DB7C82 SuSE Package Signing Key <build@suse.de>
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de>
- Various keys are moved to the documentation area
  (/usr/share/doc/packages/suse-build-key)
  - build-at-suse-sle11.asc: the old SUSE Linux Enterprise 11 key.
    if SUSE Linux Enterprise 11 packages need to be verified on
    a SUSE Linux Enterprise 12 system.
  - suse_ptf_key.asc: The suse ptf key. For verification of provided PTFs.
  - security_at_suse_de.asc: Use only for email encryption and
    verification purposes when contacting our security contact address
    security@suse.de (forwarded request 518537 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/518538
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=35
2017-08-24 16:56:44 +00:00
37fe7037e6 Accepting request 518537 from home:msmeissn:branches:Base:System
- extend the build@suse.de product key. (bsc#1014151)
  pub  2048R/39DB7C82 2013-01-31 [expires: 2020-12-06]
  uid                            SuSE Package Signing Key <build@suse.de>

- use dumpsigs script from openSUSE to merge code 

- renamed security_at_suse_de.asc to security_at_suse_de_old.asc
- security_at_suse_de.asc: new 4096 bit RSA key.
  pub  4096R/317CD502 2014-10-02 SUSE Security Team <security@suse.de>
  bnc#899509

- create suse-build-key.gpg during build.
- Remove old keys from keyring. (fate#314767)
  Keys currently inside the RPM trusted keyring:
  - pub  2048R/39DB7C82 SuSE Package Signing Key <build@suse.de>
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de>
- Various keys are moved to the documentation area
  (/usr/share/doc/packages/suse-build-key)
  - build-at-suse-sle11.asc: the old SUSE Linux Enterprise 11 key.
    if SUSE Linux Enterprise 11 packages need to be verified on
    a SUSE Linux Enterprise 12 system.
  - suse_ptf_key.asc: The suse ptf key. For verification of provided PTFs.
  - security_at_suse_de.asc: Use only for email encryption and
    verification purposes when contacting our security contact address
    security@suse.de

OBS-URL: https://build.opensuse.org/request/show/518537
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=26
2017-08-24 13:29:11 +00:00
Stephan Kulow
7d9c1d5c81 Accepting request 247206 from Base:System
- Went to new method again.
  - suse-build-key.gpg blob dropped
  - ship seperate files

OBS-URL: https://build.opensuse.org/request/show/247206
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=34
2014-09-03 16:23:10 +00:00
0969aeea70 OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=24 2014-09-01 13:50:52 +00:00
b5e18744ac OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=23 2014-08-29 08:32:52 +00:00
f7725bd1ef OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=22 2014-08-29 08:32:09 +00:00
a5f1e0dfbb OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=21 2014-08-29 08:30:52 +00:00
6ad186f7f9 - Went to new method again.
- suse-build-key.gpg blob dropped
  - ship seperate files

OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=20
2014-08-29 08:29:05 +00:00
Stephan Kulow
71ee9b5652 Accepting request 213750 from Base:System
- reverted to contain the fullkeyring build SLE12 Alpha.
- also list the old sle11 build@suse.de key temporary

OBS-URL: https://build.opensuse.org/request/show/213750
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=32
2014-01-14 12:55:19 +00:00
c11c4aaf12 - also list the old sle11 build@suse.de key temporary
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=18
2014-01-13 15:20:08 +00:00
5714f02d83 - reverted to contain the fullkeyring build SLE12 Alpha.
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=17
2014-01-13 15:18:49 +00:00
4597f322e8 imported.
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=16
2014-01-13 15:18:31 +00:00
56ed2fa213 - Got rid of default importing into roots keyring.
- Removed some old keys.
- Clarify that security@suse.de is a email only key
- PTF key is supplied also as %doc, to not be default
   imported.
- Keys currently inside:
  - pub  2048R/39DB7C82 SuSE Package Signing Key <build@suse.de>
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de>
  - pub  1024D/B37B98A9 SUSE PTF Signing Key <support@suse.com>
  - pub  2048R/3D25D3D9 SuSE Security Team <security@suse.de>

OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=15
2014-01-13 15:18:20 +00:00
dcb2211f55 OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=14 2014-01-13 15:16:35 +00:00
219c4f81e0 OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=13 2014-01-13 15:08:11 +00:00
89676078b4 - temporary readd the old SLE11 1024bit build@suse.de key
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=11
2014-01-13 14:54:37 +00:00
Stephan Kulow
8d0b77117e Accepting request 213303 from Base:System
- Merged over logic from openSUSE-build-key.
- Got rid of default importing into roots keyring.
- Removed some old keys.
- Clarify that security@suse.de is a email only key
- PTF key is supplied also as %doc, to not be default
  imported.
- Keys currently inside:
  - pub  2048R/39DB7C82 SuSE Package Signing Key &lt;build@suse.de&gt;
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) &lt;build@suse.de&gt;
  - pub  1024D/B37B98A9 SUSE PTF Signing Key &lt;support@suse.com&gt;
  - pub  2048R/3D25D3D9 SuSE Security Team &lt;security@suse.de&gt; (forwarded request 213302 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/213303
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=31
2014-01-10 06:16:26 +00:00
e2f397cd04 Accepting request 213302 from home:msmeissn:branches:Base:System
- Merged over logic from openSUSE-build-key.
- Got rid of default importing into roots keyring.
- Removed some old keys.
- Clarify that security@suse.de is a email only key
- PTF key is supplied also as %doc, to not be default
  imported.
- Keys currently inside:
  - pub  2048R/39DB7C82 SuSE Package Signing Key <build@suse.de>
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de>
  - pub  1024D/B37B98A9 SUSE PTF Signing Key <support@suse.com>
  - pub  2048R/3D25D3D9 SuSE Security Team <security@suse.de>

OBS-URL: https://build.opensuse.org/request/show/213302
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=9
2014-01-09 13:49:26 +00:00
Stephan Kulow
53735e79c4 Accepting request 201136 from Base:System
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/201136
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=30
2013-09-29 17:28:59 +00:00
Ruediger Oertel
5f8c0d355d - export keys to single files in /usr/lib/rpm/gnupg/keys
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=7
2013-09-20 13:24:41 +00:00
660d951277 Accepting request 199377 from home:oertel:branches:Base:System
- added future signing key for SLES (fate#314767) (bnc#801055)
  using 2048 bit rsa key 

- added reserve key for SLES (fate#312896)
  50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de>
  valid until (2017-01-13) 

- reduced key list. remaining keys:
  307E3D54 SuSE Package Signing Key <build@suse.de>
  3D25D3D9 SuSE Security Team <security@suse.de>
  9C800ACA SuSE Package Signing Key <build@suse.de>
  B37B98A9 SUSE PTF Signing Key <support@suse.com> 

- if we have to set $HOME, we also have to export the variable
  (bnc#665912)

OBS-URL: https://build.opensuse.org/request/show/199377
OBS-URL: https://build.opensuse.org/package/show/Base:System/suse-build-key?expand=0&rev=6
2013-09-20 12:28:04 +00:00
Stephan Kulow
c7674ec6fe Accepting request 138962 from Base:System
- export keys to single files in /usr/lib/rpm/gnupg/keys (forwarded request 138949 from oertel)

OBS-URL: https://build.opensuse.org/request/show/138962
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/suse-build-key?expand=0&rev=27
2012-10-22 20:10:31 +00:00