Bug#132920: marked as done (www.debian.org: updated text for keysigning HOWTO)
Your message dated Tue, 5 Mar 2002 19:11:15 +0100
with message-id <20020305181115.GC14389@cibalia.gkvk.hr>
and subject line Bug#132920: www.debian.org: updated text for keysigning HOWTO
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 8 Feb 2002 06:13:15 +0000
>From jaldhar@debian.org Fri Feb 08 00:13:15 2002
Return-path: <jaldhar@debian.org>
Received: from samadhi.braincells.com (mail.braincells.com) [216.162.42.100]
by master.debian.org with esmtp (Exim 3.12 1 (Debian))
id 16Z4Hb-00062k-00; Fri, 08 Feb 2002 00:13:15 -0600
Received: from jyoti.intranet.braincells.com (bgp383072bgs.jersyc01.nj.comcast.net [68.36.25.222])
by mail.braincells.com (Postfix) with SMTP
id C2857823A; Fri, 8 Feb 2002 00:44:12 -0500 (EST)
Received: by jyoti.intranet.braincells.com (sSMTP sendmail emulation); Fri, 8 Feb 2002 00:44:08 -0500
From: "Jaldhar H. Vyas" <jaldhar@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: www.debian.org: updated text for keysigning HOWTO
X-Reportbug-Version: 1.42
X-Mailer: reportbug 1.42
Date: Fri, 08 Feb 2002 00:44:08 -0500
Message-Id: <20020208054412.C2857823A@mail.braincells.com>
Delivered-To: submit@bugs.debian.org
Package: www.debian.org
Version: N/A; reported 2002-02-08
Severity: wishlist
Tags: patch
Based on my experience signing and having my key signed recently I would
like to suggest some extra text for the keysigning howto at
http://www.debian.org/events/keysigning (and can I also ask that it linked
from somewhere more prominent like the developers corner?)
I'm pretty sure the information I added is accurate. Some of the WML may
need editting though.
--
Jaldhar H. Vyas <jaldhar@debian.org>
It's a girl! See the pictures - http://www.braincells.com/shailaja/
--- keysigning.wml.old Thu Feb 7 23:52:52 2002
+++ keysigning.wml Fri Feb 8 00:27:18 2002
@@ -23,6 +23,7 @@
<li>The key owner verifies that the fingerprint of the key about to be
signed is indeed their own.
+
</ol>
Most importantly, if the key owner is not actively participating in
@@ -55,19 +56,57 @@
gpg --keyserver keyring.debian.org --recv-keys 0xDEADBEAF
</pre>
+<p>If the person whose key you want to sign is not in the Debian keyring,
+replace keyring.debian.org with a public keyserver like pgpkeys.pgp.net (which
+despitethe name also stores GnuPG keys.)
+
+<p>Note we can use the last eight hex digits of the key in this and other GnuPG
+operations. The 0x in front is also optional.
+
<li> To sign the key, enter the edit menu with
<pre>
gpg --edit-key 0xDEADBEAF
</pre>
-<li> In GnuPG select all uids to sign with <code>uid n</code>.
+<li> In GnuPG select all uids to sign with <code>uid n</code> where n is the
+number of the uid shown in the menu. You can also press enter to sign all
+the uids.
<li> To sign a key, enter <code>sign</code>. You will then be shown
the fingerprint of they key which you have to compare with the
one you've got from the person you met.
<li> Quit GnuPG with <code>quit</code>
+
+<li> To verify you have signed the key correctly, you can do:
+
+<pre>
+ gpg --list-sigs 0xDEADBEAF
+</pre>
+
+You should see your own name and fingerprint (in short form) in the output.
+
+<li> Once you are satisfied everything went ok you can send the signed key
+to its' recipient by doing:
+
+<pre>
+ gpg --export -a 0xDEADBEAF > someguys.key
+</pre>
+
+<p>The <code>-a</code> option exports the key in ASCII format so it can be
+emailed without possibility of corruption.
+
+<li> If someone signs your key in this manner, you can add it to the Debian
+keyring by doing:
+
+<pre>
+ gpg --import mysigned.key
+ gpg --keyserver keyring.debian.org --send-keys <your key id>
+</pre>
+
+<p>It may take a while for the keying maintainers to update your key so be
+patient. You should also upload your updated key to the public keyservers.
</ul>
---------------------------------------
Received: (at 132920-done) by bugs.debian.org; 5 Mar 2002 18:09:45 +0000
>From joy@cibalia.gkvk.hr Tue Mar 05 12:09:45 2002
Return-path: <joy@cibalia.gkvk.hr>
Received: from cibalia.gkvk.hr [161.53.211.3]
by master.debian.org with esmtp (Exim 3.12 1 (Debian))
id 16iJNh-0003YG-00; Tue, 05 Mar 2002 12:09:45 -0600
Received: from joy by cibalia.gkvk.hr with local (Exim 3.33 #1 (Debian))
id 16iJP9-0003oG-00; Tue, 05 Mar 2002 19:11:15 +0100
Date: Tue, 5 Mar 2002 19:11:15 +0100
To: "Jaldhar H. Vyas" <jaldhar@debian.org>, 132920-done@bugs.debian.org
Subject: Re: Bug#132920: www.debian.org: updated text for keysigning HOWTO
Message-ID: <20020305181115.GC14389@cibalia.gkvk.hr>
References: <20020208054412.C2857823A@mail.braincells.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20020208054412.C2857823A@mail.braincells.com>
User-Agent: Mutt/1.3.27i
From: Josip Rodin <joy@cibalia.gkvk.hr>
Delivered-To: 132920-done@bugs.debian.org
On Fri, Feb 08, 2002 at 12:44:08AM -0500, Jaldhar H. Vyas wrote:
> Based on my experience signing and having my key signed recently I would
> like to suggest some extra text for the keysigning howto at
> http://www.debian.org/events/keysigning (and can I also ask that it linked
> from somewhere more prominent like the developers corner?)
>
> I'm pretty sure the information I added is accurate. Some of the WML may
> need editting though.
Done, thanks.
About the document and linking to it, I thought we had a link to a key
signing howto somewhere at devel/... into a people.debian.org/~jmarler/ or
something like that... will check.
--
2. That which causes joy or happiness.
Reply to: