Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security page update #344

Open
Begina opened this issue Jun 23, 2021 · 5 comments
Open

Security page update #344

Begina opened this issue Jun 23, 2021 · 5 comments

Comments

@Begina
Copy link

Begina commented Jun 23, 2021

Security pages advises adding gpg keys via hkp://pool.sks-keyservers.net, however, that service is deprecated, and as of 2021-06-21 DNS records are no longer provided at all.

more info at: https://sks-keyservers.net/status/

@andyneff
Copy link

andyneff commented Aug 3, 2021

I tried all of these on Centos 7

  • hkp://keys.openpgp.org
  • hkp://pgp.mit.edu
  • hkp://keyserver.pgp.com
  • hkp://keyserver.ubuntu.com

And they either timed out or said "gpgkeys: key ... can't be retrieved"

In the end, I had to:

curl -sSL https://rvm.io/mpapis.asc | gpg2 --import
curl -sSL https://rvm.io/pkuczynski.asc | gpg2 --import

@bkmgit
Copy link
Contributor

bkmgit commented Aug 8, 2021

hkp://keys.openpgp.org seemed to work, so one can use

gpg2 --keyserver hkp://keys.openpgp.org --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3 7D2BAF1CF37B13E2069D6956105BD0E739499BDB

but the key 409B6B1796C275462A1703113804BB82D39DC0E3 does not have an identity and so should be updated.

@bkmgit
Copy link
Contributor

bkmgit commented Aug 9, 2021

@mpapis Thanks for your work on this. Might it be possible to add an identity to your key?

@mpapis
Copy link
Member

mpapis commented Aug 9, 2021

@bkmgit can you give me some instructions on how to add the identity? I'm pretty busy with personal staf.

@bkmgit
Copy link
Contributor

bkmgit commented Aug 9, 2021

Thanks for your prompt response. The following may be helpful:

The key can be uploaded to
https://keys.openpgp.org/upload
As indicated in the OpenPGP documentation, it is also possible to upload the key from the command line using

gpg --export [email protected] | curl -T - https://keys.openpgp.org 

The documentation also indicate that the "no user id" problem is something that is being worked on.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants