[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

New "strong" SSH Key for Git Repositories



The live-manual git repository has been open to push to by anyone using
the method descriped in:

  "1.4.1 Applying patches"

  http://live.debian.net/manual/html/live-manual/about-manual.en.html#h1.4.1

The used SSH key was a 1024 bit RSA key. I've switched to a 4096 bit
"strong"[0] RSA key now:

  http://live.debian.net/other/keys/git@live.debian.net
  http://live.debian.net/other/keys/git@live.debian.net.pub

GPG Signatures with my key from the debian-keyring are available as:

  http://live.debian.net/other/keys/git@live.debian.net.sign
  http://live.debian.net/other/keys/git@live.debian.net.pub.sign

The previously used key and signatures are available for reference
purposes at:

  http://live.debian.net/other/keys/old/

For those that use this key to push to the live-manual repository,
please update to the new key. Both the old and the new key can be used,
I'll intend to remove the old key somewhen end of year though.

Thanks,
Daniel

[0] from a crypto point of view, it doesn't make any difference of
    using a stronger key here since both the public and private keys
    are shared publicly on purpose, however, from a sysadmin point
    of view, it's nicer for consistency in order to get rid of
    'whitelisting' the weak key in automated checks etc.

-- 
Address:        Daniel Baumann, Donnerbuehlweg 3, CH-3012 Bern
Email:          daniel.baumann@progress-technologies.net
Internet:       http://people.progress-technologies.net/~daniel.baumann/


Reply to: