Hi
as announced in [1] we have a new archive key, that we intended to use
when one of
- the release of Wheezy
- the expiry of the old key, 0x473041FA (2018-03-05)
happens.
We didn't do it exactly at Wheezy release time - but we are going to do
it now.
I just configured the archive to additionally use the new key,
4096R/46925553 for all suites that are changed on an ongoing basis.
We will keep the old key in use for another two weeks before we remove it.
This will be pushed to the mirrors with the next dinstall run and be
visible in about 5 hours from now.
For Squeeze and Wheezy the key will change at their next point release.
For reference, the new keys data again:
pub 4096R/0x8B48AD6246925553 2012-04-27 [expires: 2020-04-25]
Key fingerprint = A1BD 8E9D 78F7 FE5C 3E65 D8AF 8B48 AD62 4692 5553
uid Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster@debian.org>
sig!3 0x8B48AD6246925553 2012-04-27 Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster@debian.org>
sig!3 0x715ED6A07E7B8AC9 2012-04-27 Joerg Jaspert <joerg@debian.org>
sig!3 P 0xDB16CF5BB12525C4 2012-04-27 Joerg Jaspert <joerg@debian.org>
Signature policy: string
Signature policy: http://gpg.ganneff.de/policy.txt
sig! 0x5ECAFB00A3AE44A4 2012-04-27 Michael O'Connor (stew) <stew@vireo.org>
sig! 0xBC372252CA1CF964 2012-04-27 Ansgar Burchardt <ansgar@debian.org>
sig! 0x11B4E5FF15B0FD82 2012-04-27 Mark Hymers <mhy@debian.org>
sig! 0xC24B65A2672C8B12 2012-04-28 Alexander Reichle-Schmehl <tolimar@debian.org>
sub 4096R/0x85215E51ADD6B7E2 2012-04-27 [expires: 2020-04-25]
sig! 0x8B48AD6246925553 2012-04-27 Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster@debian.org>
The key is available via http://ftp-master.debian.org/archive-key-7.0.asc and
is also available on the keyservers. The key is also in the
debian-archive-keyring package as found in Squeeze, Wheezy and later, so
users should not need to do anything special.
[1] https://lists.debian.org/debian-devel-announce/2012/05/msg00000.html
--
bye, Joerg
If something goes wrong at the plant, blame the guy who can’t speak English.
Attachment:
pgpOWe1UhWPZb.pgp
Description: PGP signature