[eduVPN-deploy] [URGENT] CentOS repository key change on 2021-05-01

François Kooman fkooman at tuxed.net
Mon Apr 19 21:03:43 CEST 2021


Hi all,

The current CentOS (and Fedora) repository/package signing key will 
expire on May 1st.

Updates released after this date will be signed with the new key. You 
can install the new key as follows on your CentOS (or Fedora) server:

     sudo rpm --import 
https://repo.eduvpn.org/v2/rpm/centos%2B20210419%40eduvpn.org.asc

That's all. If you do this any time between now and May 1st you won't 
notice anything.

For eduVPN 3.x we plan to make 1 signing key, for Debian and Fedora that 
will expire long after eduVPN 3.x will be a thing so we can put this key 
update shenanigans behind us. Sorry about this!

You can (cross) check the fingerprint here:

* https://twitter.com/fkooman/status/1384220232416333825
* https://gist.github.com/fkooman/c352bad65964b505532e2d5d07988e30

Let us know if you have any questions or remarks.

Regards,
François

###################
# OLD SIGNING KEY #
###################

sec   rsa3072/0x1ACB2EDEAA7931B2 2018-05-02 [SC] [expires: 2021-05-01]
       Key fingerprint = 1B50 FE64 0B1A 36AC F8F9  3117 1ACB 2EDE AA79 31B2
uid                   [ultimate] Let's Connect! (Software Signing Key) 
<software at letsconnect-vpn.org>
ssb   rsa3072/0x81D32A8B6876AF85 2018-05-02 [E] [expires: 2021-05-01]

###################
# NEW SINGING KEY #
###################

sec   rsa3072/0xBAC1898220FB8A35 2021-04-19 [SC] [expires: 2026-04-18]
       Key fingerprint = 99AF 412F BBA0 BF17 92EE  1F41 BAC1 8982 20FB 8A35
uid                   [ultimate] CentOS Packaging Key 
<centos+20210419 at eduvpn.org>
ssb   rsa3072/0xD30FD2E41233E2E2 2021-04-19 [E] [expires: 2026-04-18]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x3E7DF2FE73B427C0.asc
Type: application/pgp-keys
Size: 655 bytes
Desc: OpenPGP public key
URL: <https://list.surfnet.nl/pipermail/eduvpn-deploy/attachments/20210419/01a0b147/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 236 bytes
Desc: OpenPGP digital signature
URL: <https://list.surfnet.nl/pipermail/eduvpn-deploy/attachments/20210419/01a0b147/attachment.sig>


More information about the eduVPN-deploy mailing list