New "strong" SSH Key for Git Repositories
The live-manual git repository has been open to push to by anyone using
the method descriped in:
"1.4.1 Applying patches"
http://live.debian.net/manual/html/live-manual/about-manual.en.html#h1.4.1
The used SSH key was a 1024 bit RSA key. I've switched to a 4096 bit
"strong"[0] RSA key now:
http://live.debian.net/other/keys/git@live.debian.net
http://live.debian.net/other/keys/git@live.debian.net.pub
GPG Signatures with my key from the debian-keyring are available as:
http://live.debian.net/other/keys/git@live.debian.net.sign
http://live.debian.net/other/keys/git@live.debian.net.pub.sign
The previously used key and signatures are available for reference
purposes at:
http://live.debian.net/other/keys/old/
For those that use this key to push to the live-manual repository,
please update to the new key. Both the old and the new key can be used,
I'll intend to remove the old key somewhen end of year though.
Thanks,
Daniel
[0] from a crypto point of view, it doesn't make any difference of
using a stronger key here since both the public and private keys
are shared publicly on purpose, however, from a sysadmin point
of view, it's nicer for consistency in order to get rid of
'whitelisting' the weak key in automated checks etc.
--
Address: Daniel Baumann, Donnerbuehlweg 3, CH-3012 Bern
Email: daniel.baumann@progress-technologies.net
Internet: http://people.progress-technologies.net/~daniel.baumann/
Reply to: