From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id cPYeG99b02B+aQAAgWs5BA (envelope-from ) for ; Wed, 23 Jun 2021 18:05:51 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id 4CPgFt9b02DoVQAAB5/wlQ (envelope-from ) for ; Wed, 23 Jun 2021 16:05:51 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 1AD581F994 for ; Wed, 23 Jun 2021 18:05:51 +0200 (CEST) Received: from localhost ([::1]:58244 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lw5Nt-0007ue-Dk for larch@yhetil.org; Wed, 23 Jun 2021 12:05:49 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:42034) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lw5Nf-0007sN-85 for guix-devel@gnu.org; Wed, 23 Jun 2021 12:05:36 -0400 Received: from mout01.posteo.de ([185.67.36.65]:49251) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lw5NU-0002gH-MF for guix-devel@gnu.org; Wed, 23 Jun 2021 12:05:28 -0400 Received: from submission (posteo.de [89.146.220.130]) by mout01.posteo.de (Postfix) with ESMTPS id 716D3240028 for ; Wed, 23 Jun 2021 18:05:22 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.net; s=2017; t=1624464322; bh=3BDwwTgXBr2+nQYtszyDhoFX6pzP3vZFAtAElwlP52A=; h=Subject:From:To:Cc:Date:From; b=i1HZPvWuxMnkv3y7wU0pSG6EJem2ZdJDY5SlVM/U/Hawdzbycsb0rcLBcbaa0RAOK 9knJJiskoFA2qvbirfElw98qSnAZDSk39C/z8SnS83llRdzZzOFExSOoEhN76j360f A68zhNwjZQv/WYZC2o1THywiy2j9kSDLzwH7Aua4gWVX4Fncb68e0SRu8TFTNvheUR 56GEfORSaE2fYrOsbV2KwSA0tUGnPtXqwXtXdeWViMbmSYQWRdqkEBagXgbsoAMn/m vBfJrIjrQZ6RTwECvyoHVrSB3VqQYq390/ccrIWNPKN1GweUUIlTbC1WbXKqh3BvGt O6JbzHrBCLnIw== Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 4G97QT39t3z6tmM; Wed, 23 Jun 2021 18:05:21 +0200 (CEST) Message-ID: Subject: Re: New signing key From: Eric Bavier To: Ludovic =?ISO-8859-1?Q?Court=E8s?= Date: Wed, 23 Jun 2021 16:05:06 +0000 In-Reply-To: <871r8sy9n2.fsf@gnu.org> References: <124ad5525164ec009000a9fad5c9dad23e68929d.camel@posteo.net> <871r8sy9n2.fsf@gnu.org> Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-rPFnAkj+U5q1bn0H2Kgw" MIME-Version: 1.0 Received-SPF: pass client-ip=185.67.36.65; envelope-from=bavier@posteo.net; helo=mout01.posteo.de X-Spam_score_int: -43 X-Spam_score: -4.4 X-Spam_bar: ---- X-Spam_report: (-4.4 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1624464351; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=YD/1I3phifOgNJcZLaJXg489k3MSmAljcYx3R2uTTjk=; b=tdwC5M86zoVeGrPnIyVjyeuU1aAsAcdVAjobAxG8Fp0FjiX0+fhsZTO33LvXe8A4B765mv Vpzo2byNrZJYHmElnuYj1ohqQcNbYS0fpxq3N73tM1X0Gl/exdXBDHtoHuXkm+GSnHA+BT 3etkvOZSbfeOmCfVTcFh5Bq9IebRvHPhZvTJjKkozZFp2wyO8SNOMT/1FHe7muZeGkmhGl C04qqJvOMoDCYrKfah3n6+0nRS5hK1634chLSKoYUCFalRXG/2n0qHuo246oODIwOQeD1g qTcw63kc/87h1YUIdGylGLHQNxZWRY4Nz0sJhj9ZMjwqO+tpiOEVxkQ2Ibz08A== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1624464351; a=rsa-sha256; cv=none; b=tbedN9JPeTwrWBfKcFoqowOmBfHg1pl72IZeDqCAWEV3IlP8Qt8wAKWm2XchWu3bnxhOrL 3taXeeYKRIH2FjQ8cWMTGIRrRZWG09GB/t4idl4Rxcd6d906O1cjD087kUjPPrGMXEaICJ xeq73PpZP+xu8DpAeIAD9+OhufCMFBM5rxNFqANNAuiVJSwqCR0SFhiizSwtA5E46seLwe vDQhdX82ZH1IwSxawacL1NwAWjLOFHah4UPqSEtESgukEsZJUuzn/gLuLJxpKqNjslxkNI cl5T47E//6W54+jWUh7Q+DtYyUtVUsXMd3Bf3/kvLTw6228IoMDIIyMRhCQz8g== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=posteo.net header.s=2017 header.b=i1HZPvWu; dmarc=pass (policy=none) header.from=posteo.net; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -5.23 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=posteo.net header.s=2017 header.b=i1HZPvWu; dmarc=pass (policy=none) header.from=posteo.net; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: 1AD581F994 X-Spam-Score: -5.23 X-Migadu-Scanner: scn0.migadu.com X-TUID: e8tVrwgYCkHJ --=-rPFnAkj+U5q1bn0H2Kgw Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, 2021-06-23 at 15:48 +0200, Ludovic Court=C3=A8s wrote: > Hi, >=20 > Apologies for the delay! >=20 > Eric Bavier skribis: >=20 > > I've updated my GPG key on Savannah with a new signing subkey and uid. >=20 > Done in 3694c0d4fee0f7faf130ecd9386ea45932a19543. Thank you Thank you! > In > d1d2bf3eb6ba74b058969756a97a30aec7e0c4d1 I added your new key and > renamed the old one, but perhaps we can just remove the old one, if the > old sub-key is still in the new one? I think the old key is still there, yes. I didn't remove it, just added the new key. >=20 > Anyway, you should be able to push to =E2=80=98master=E2=80=99 now. Plea= se double-check > with =E2=80=98guix git authenticate=E2=80=99 (and the pre-push hook) that= everything=E2=80=99s > fine. Will do. >=20 > > Could a maintainer do the necessary repo updates? >=20 > Note that any committer who=E2=80=99s checked that all is fine can do thi= s, but > I guess everyone was busy hacking (or reviewing!). ;-) I completely understand. I didn't trust myself to know how to check that all is fine. :) >=20 > In the future, unless you lose control of the key, it=E2=80=99s even bett= er if > you do it yourself: push a commit signed with the old key that > introduces the new key. Otherwise we have to trust that you really are > the one who uploaded the new key on Savannah. In this case, the old key had already expired. I think others here have reset the expiry date on their keys before? I like the idea of honoring the expiration dates I set, and creating a new key. But I'm also willing to adopt whatever we decide is a best practice. Thanks again, `~Eric --=-rPFnAkj+U5q1bn0H2Kgw Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQJGBAABCgAwFiEEo6S0GQB0CHyn3laYvEXKZ+L40AcFAmDTW7ISHGJhdmllckBw b3N0ZW8ubmV0AAoJELxFymfi+NAHZlAP+QHTlzV+efn/7DdiLP4vep3nUdvnzSzD dixoax5r0WhYRAQOGyQIyCXamSai8yVB2Tb6S8Y3WNhyn7XHbRDnAe8pjXObkOAz ZNLk+OyhUki1PHlmFQDksOIc9roCjA9uptL8ah5AmRowG+puUUG++iO+CLYVLZEE Xd+yPFQ03023SeAHePoFsjDjlJ4d+hi5caKaVJTRJpLgXpR0pQJttr5XXjnvOqnI 4dsnNf+BcGrUQl2f6RPXicILdfFC8fFFyCDH4amM3EX5dTs6Lr8vurGQuu7FECOB XDohC1truZepHoS6uUBi7IdT8aEEoWxp9laBKV43osr19hAHFKdnGtm2osWefoMv lJDCCOBCJFTHjKLy6XyJbDu+hIaInzTEQUtiGZYd5ipjEh9Bnu04BjTyAKFJIUj3 PuizcnIOQftjQmAGIXzk0bcYLRBpeKPR93rZS6Am5ntMLwJSQPxCR2MP8g2U+URA zc6C2SaZOIJKbz5oK1oSgfBlLACLDNon6n/jZxCf3zcIxPDCvwIjNgkPWF83+VP8 UMUPsRgc4GCPQQdjBvL+YhsJC5Cm6m6vv4E7wnrjJMGk0vh6cKAsFt16a0TP5D0T YLMaY1SZ5+fhUKCRLmHGKmjeAT2eYBgUo0Cj7UgHt8UBbRiFjNSZsZySlyR/SUa2 s5KDHUiU0Zb/ =5xoJ -----END PGP SIGNATURE----- --=-rPFnAkj+U5q1bn0H2Kgw--