[eduVPN-deploy] [URGENT] CentOS repository key change on 2021-05-01

[François Kooman]

Hi all,

A short follow up. The packages in the CentOS/Fedora repository have now 
been signed by the new key as mentioned in the previous mail.

Make sure you install the new key before updating your server.

Regards,
François

On 19.04.21 21:03, François Kooman via eduVPN-deploy wrote:
> Hi all,
> 
> The current CentOS (and Fedora) repository/package signing key will
> expire on May 1st.
> 
> Updates released after this date will be signed with the new key. You
> can install the new key as follows on your CentOS (or Fedora) server:
> 
>       sudo rpm --import
> https://repo.eduvpn.org/v2/rpm/centos%2B20210419%40eduvpn.org.asc
> 
> That's all. If you do this any time between now and May 1st you won't
> notice anything.
> 
> For eduVPN 3.x we plan to make 1 signing key, for Debian and Fedora that
> will expire long after eduVPN 3.x will be a thing so we can put this key
> update shenanigans behind us. Sorry about this!
> 
> You can (cross) check the fingerprint here:
> 
> * https://twitter.com/fkooman/status/1384220232416333825
> * https://gist.github.com/fkooman/c352bad65964b505532e2d5d07988e30
> 
> Let us know if you have any questions or remarks.
> 
> Regards,
> François
> 
> ###################
> # OLD SIGNING KEY #
> ###################
> 
> sec   rsa3072/0x1ACB2EDEAA7931B2 2018-05-02 [SC] [expires: 2021-05-01]
>         Key fingerprint = 1B50 FE64 0B1A 36AC F8F9  3117 1ACB 2EDE AA79 31B2
> uid                   [ultimate] Let's Connect! (Software Signing Key)
> <software at letsconnect-vpn.org>
> ssb   rsa3072/0x81D32A8B6876AF85 2018-05-02 [E] [expires: 2021-05-01]
> 
> ###################
> # NEW SINGING KEY #
> ###################
> 
> sec   rsa3072/0xBAC1898220FB8A35 2021-04-19 [SC] [expires: 2026-04-18]
>         Key fingerprint = 99AF 412F BBA0 BF17 92EE  1F41 BAC1 8982 20FB 8A35
> uid                   [ultimate] CentOS Packaging Key
> <centos+20210419 at eduvpn.org>
> ssb   rsa3072/0xD30FD2E41233E2E2 2021-04-19 [E] [expires: 2026-04-18]
> 
> 
> _______________________________________________
> eduVPN-deploy mailing list
> eduVPN-deploy at list.surfnet.nl
> https://list.surfnet.nl/mailman/listinfo/eduvpn-deploy
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x3E7DF2FE73B427C0.asc
Type: application/pgp-keys
Size: 655 bytes
Desc: OpenPGP public key
URL: <https://list.surfnet.nl/pipermail/eduvpn-deploy/attachments/20210501/2daca77d/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 236 bytes
Desc: OpenPGP digital signature
URL: <https://list.surfnet.nl/pipermail/eduvpn-deploy/attachments/20210501/2daca77d/attachment.sig>