[Groonga-commit] groonga/groonga at 8f11f4e [master] packages apt: use new key for package signing

Back to archive index

Kentaro Hayashi null+****@clear*****
Mon Jan 29 17:28:28 JST 2018


Kentaro Hayashi	2018-01-29 17:28:28 +0900 (Mon, 29 Jan 2018)

  New Revision: 8f11f4e1c7504f36512fe2879298c3a9e653c767
  https://github.com/groonga/groonga/commit/8f11f4e1c7504f36512fe2879298c3a9e653c767

  Message:
    packages apt: use new key for package signing
    
    Until signing key transition is completed, both of old and new key
    are bundled.

  Modified files:
    packages/apt/Makefile.am
    packages/apt/debian/changelog
    packages/apt/debian/groonga-keyring.postinst
    packages/apt/debian/groonga-keyring.postrm.in
    packages/apt/debian/rules

  Modified: packages/apt/Makefile.am (+2 -0)
===================================================================
--- packages/apt/Makefile.am    2018-01-29 17:27:48 +0900 (8ba8e0b11)
+++ packages/apt/Makefile.am    2018-01-29 17:28:28 +0900 (6da926174)
@@ -87,6 +87,8 @@ tmp/$(KEYRING_BASE_NAME).tar.gz: ensure-public-key
 	mkdir -p $(KEYRING_BASE_NAME)
 	gpg --armor --export '$(GPG_UID)' > \
 	  $(KEYRING_BASE_NAME)/groonga-keyring.gpg
+	gpg --armor --export '2701F317CFCCCB975CADE9C2624CF77434839225' > \
+	  $(KEYRING_BASE_NAME)/groonga-keyring-rsa4096.gpg
 	mkdir -p tmp/
 	tar cvzf tmp/$(KEYRING_BASE_NAME).tar.gz $(KEYRING_BASE_NAME)
 

  Modified: packages/apt/debian/changelog (+6 -0)
===================================================================
--- packages/apt/debian/changelog    2018-01-29 17:27:48 +0900 (d1e8835e2)
+++ packages/apt/debian/changelog    2018-01-29 17:28:28 +0900 (a2a0580a7)
@@ -1,3 +1,9 @@
+groonga-keyring (2018.01.29-1) unstable; urgency=medium
+
+  * Add new key because weak key (1024bit) is regarded as invalid key by secure apt.
+
+ -- Kentaro Hayashi <hayashi �� clear-code.com>  Mon, 29 Jan 2018 15:43:35 +0900
+
 groonga-keyring (2012.05.29-1) unstable; urgency=low
 
   * Replace old key id to new one.

  Modified: packages/apt/debian/groonga-keyring.postinst (+1 -0)
===================================================================
--- packages/apt/debian/groonga-keyring.postinst    2018-01-29 17:27:48 +0900 (bf268a63e)
+++ packages/apt/debian/groonga-keyring.postinst    2018-01-29 17:28:28 +0900 (7ec4890da)
@@ -8,6 +8,7 @@ case "$1" in
     configure)
 	if [ -x /usr/bin/apt-key ]; then
 	    apt-key add /usr/share/keyrings/groonga-keyring.gpg
+	    apt-key add /usr/share/keyrings/groonga-keyring-rsa4096.gpg
 	fi
         ;;
     abort-upgrade|abort-deconfigure|abort-remove)

  Modified: packages/apt/debian/groonga-keyring.postrm.in (+1 -0)
  Mode: 100644 -> 100755
===================================================================
--- packages/apt/debian/groonga-keyring.postrm.in    2018-01-29 17:27:48 +0900 (b2e8ad6b6)
+++ packages/apt/debian/groonga-keyring.postrm.in    2018-01-29 17:28:28 +0900 (82af221c5)
@@ -6,6 +6,7 @@ case "$1" in
     remove)
 	if [ -x /usr/bin/apt-key ]; then
 	    apt-key del @GPG_UID@
+	    apt-key del 2701F317CFCCCB975CADE9C2624CF77434839225
 	fi
 	;;
     purge)

  Modified: packages/apt/debian/rules (+2 -0)
===================================================================
--- packages/apt/debian/rules    2018-01-29 17:27:48 +0900 (759f2fd5e)
+++ packages/apt/debian/rules    2018-01-29 17:28:28 +0900 (39c865962)
@@ -13,5 +13,7 @@ override_dh_install:
 	install -d debian/tmp/usr/share/keyrings/
 	install -m 0644 groonga-keyring.gpg \
 	  debian/tmp/usr/share/keyrings/
+	install -m 0644 groonga-keyring-rsa4096.gpg \
+	  debian/tmp/usr/share/keyrings/
 
 	dh_install
-------------- next part --------------
HTML����������������������������...
URL: https://lists.osdn.me/mailman/archives/groonga-commit/attachments/20180129/fa76e808/attachment-0001.htm 



More information about the Groonga-commit mailing list
Back to archive index