[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[tor-talk] Current RPMs re-siged with new key



Hi,

as I was announcing few days ago, RPM keys rotated.

Since there seems to be bug in repo_gpgcheck validation of repomd.xml.asc, I
regenerated repo and package signatures. Both 0.2.6.10 and 0.2.7.2 were re-signed.

The new key's fingerprint is:

E273 44C4 BD24 BEDF E4F4  C741 803F EFB7 F4B8 5E0F

You can double-check the fingerprint on the The Tor RPM page
(https://www.torproject.org/docs/rpms.html.en).

Yum/DNF should be able to pick up that the key is changed and import it, but in
case it doesn't, you can import it as root:

gpg --keyserver pool.sks-keyservers.net --recv-keys F4B85E0F
gpg -a --export E27344C4BD24BEDFE4F4C741803FEFB7F4B85E0F > tpo.asc
rpm --import tpo.asc

Ondrej

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk