opendev
/
system-config
Code Issues Proposed changes

Document documenting rotated signing keys 

There's now a section of the releases site which we use to document
our current and past artifact signing keys. For completeness,
update the signing implementation instructions with directions for
keeping that current.

Change-Id: If25d9e868fbdd7aeb1157ef134e5abcc67c1c688
Depends-On: I083bc8acf8d95e938afb5446d786eedf4fc43751
This commit is contained in:
Jeremy Stanley 2016-12-12 20:02:00 +00:00
parent a37e3552ae
commit 97c58d7a73
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
doc/source/signing.rst
View File

@ -475,6 +475,25 @@ passphrase to use the signing subkey:
=i1wq
-----END PGP MESSAGE-----
To document this transition, export a minimal text version of the
public master key:
.. code-block:: shell-session
root@puppetmaster:~# ( gpg --fingerprint \
> 0x120d3c23c6d5584d6fc2464664dbb05acc5e7c28
> gpg --armor --export-options export-clean,export-minimal \
> --export 0x120d3c23c6d5584d6fc2464664dbb05acc5e7c28 ) > \
> 0x120d3c23c6d5584d6fc2464664dbb05acc5e7c28.txt
Add the file to a change for the `openstack/releases` repo placing
it in the `doc/source/static` directory, and then link it similarly
to other exported public keys are linked in the `Cryptographic
Signatures
<https://releases.openstack.org/#cryptographic-signatures>` section
of `doc/source/index.rst` (noting the appropriate end date for use of
the prior key as the start date for the new one).
Attestation
-----------