From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: Call for volunteer(s) for Guix "security" web page Date: Tue, 27 Sep 2016 14:16:07 -0400 Message-ID: <20160927181607.GJ2569@jasmine> References: <20160916161458.GA17780@jasmine> <20160925225248.GA13131@jasmine> <87ponp90ta.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="eHhjakXzOLJAF9wJ" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:56681) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1box61-00026f-Ak for guix-devel@gnu.org; Tue, 27 Sep 2016 14:27:14 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1box5x-0002zL-66 for guix-devel@gnu.org; Tue, 27 Sep 2016 14:27:12 -0400 Content-Disposition: inline In-Reply-To: <87ponp90ta.fsf@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ludovic =?iso-8859-1?Q?Court=E8s?= Cc: guix-devel@gnu.org --eHhjakXzOLJAF9wJ Content-Type: multipart/mixed; boundary="mojUlQ0s9EVzWg2t" Content-Disposition: inline --mojUlQ0s9EVzWg2t Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Sep 27, 2016 at 10:58:09AM +0200, Ludovic Court=C3=A8s wrote: > > + (h2 "Release signatures") > > + (p "Releases of Guix and GuixSD are signed using the Op= enPGP " > > + "key with the fingerprint " > > + "3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5.= " > > + "This key can be obtained from XXX.") >=20 > Maybe link to > > or copy/paste the text? Though we should give a =E2=80=98gpg --recv-keys= =E2=80=99 > command that uses the full fingerprint instead of just the 64-bit ID > (which is still too small, some say.) Here's a patch that uses the fingerprint in guix.texi. What do you think? Also, please verify that I've got it right :) --mojUlQ0s9EVzWg2t Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: attachment; filename="0001-doc-Give-the-full-key-fingerprint-instead-of-the-lon.patch" Content-Transfer-Encoding: quoted-printable =46rom 64b1df0a9565154ac2a1bd5289a13572b00bb5e0 Mon Sep 17 00:00:00 2001 =46rom: Leo Famulari Date: Tue, 27 Sep 2016 14:12:02 -0400 Subject: [PATCH] doc: Give the full key fingerprint instead of the long key ID. * doc/guix.texi (OPENPGP-SIGNING-KEY-ID): Use fingerprint instead of long key ID. --- doc/guix.texi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/guix.texi b/doc/guix.texi index c159e12..239428a 100644 --- a/doc/guix.texi +++ b/doc/guix.texi @@ -10,7 +10,7 @@ @include version.texi =20 @c Identifier of the OpenPGP key used to sign tarballs and such. -@set OPENPGP-SIGNING-KEY-ID 090B11993D9AEBB5 +@set OPENPGP-SIGNING-KEY-ID 3CE464558A84FDC69DB40CFB090B11993D9AEBB5 =20 @copying Copyright @copyright{} 2012, 2013, 2014, 2015, 2016 Ludovic Court=E8s@* --=20 2.10.0 --mojUlQ0s9EVzWg2t-- --eHhjakXzOLJAF9wJ Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJX6rdnAAoJECZG+jC6yn8IVo0P/0vGTrqo8lOO0LsBAmPoNlG1 /KkyZ55igyHsTci/wesaHOCyEs9X5+/h2/2y2HMMf1W7q6Dp+7RWYtP7XwVHQYne 82aaFEqncrkuGr4iRwoomrouU42KpWgaCHsu2rDt/PtR5ytfwBxX0coaolXvFvXB F9p4VLcyOynSdM2zVSWm610o8QDT3P9q0cJo56dc530z9N7Iakx+1WEQongGOpUQ txq/bE4XKCASfbmCU0VPsegCZgpz8Bet4ZWBdjc+ei2c84tu3nfhL5yEtxLW0Spy b//g4Dki/HddaREGLEvl5Ixp6QQuopLOojAxunMTphToUjaGoS8/UWck0Mk58Hge jzZnM+/wf5tWqUbDU/Vgxkv79EecmgNhO62P0DbG/PB9zdTJ5+cgMA4nncAtbx7f X+uY1gweBFiTzoQkmX25TX+J5pn+Yhb9iUpr1fEKBcQDC4/PJdbsUt6r/NZKM1ul HLyihuZBhiUd8xGb8/eASPtuti6u0FhX7JQTVw4o+uDDmLdURsR0+Ot8J1G3DMXo sAm0MIov5yjfMz7AcgbL2j/+cRj03j320VCB/E/YKCw8mkVPzcAbhKmv5oPvzb47 l2pnEzs9Z1LeNrI0zL40EjJsU6pir1YGV37quJxovhdA47TMDZr0SWyjjVXo+Moe Ea3cMpslNL/4f04kEv0N =Qnrq -----END PGP SIGNATURE----- --eHhjakXzOLJAF9wJ--