Return to developer_key_signing.mdwn CVS log

Up to [NetBSD Developer Wiki] / wikisrc

Annotation of wikisrc/developer_key_signing.mdwn, revision 1.3

1.3     ! wiki        1: # Developer Key Signing
        !             2: 
        !             3: Developers need to generate, maintain, and sign keys to keep a web of trust.  The following are shortcut commands to accomplish this.
        !             4: 
        !             5: Many of the commands will have various prompts that should be obvious (selecting keys out of a list, entering passphrases, etc).  That verbage has been eliminated from the examples.
        !             6: 
        !             7: 
1.1       wiki        8: * Key Generation
                      9: * Extend Expiration
                     10: * Key Uploading
                     11: * Key Download
                     12: * Key Signing
                     13: * Signature Upload
                     14: 
                     15: ## Key Generation 
                     16: *TBD*
                     17: 
                     18: ## Extending Expiration
                     19: 
                     20: Your key will eventually expire.  You can extend the key expiration time:
                     21: 
                     22: netpgp:
                     23: [[!template  id=programlisting text="""
                     24: unsupported at this time.
                     25: """]]
                     26: 
                     27: gpg:
                     28: [[!template  id=programlisting text="""
                     29: # gpg --edit-key C631C69E
                     30: Command> expire
                     31: Key is valid for? (0) 5y
                     32: """]]
                     33: 
                     34: You will need to re-upload to the key-server.
                     35: 
                     36: ## Key Uploading
                     37: 
1.2       wiki       38: gpg:
                     39: [[!template  id=programlisting text="""
                     40: # gpg --keyserver pgp.mit.edu --send-keys C631C69E
                     41: """]]
                     42: 
                     43: 
1.1       wiki       44: ## Key Download
                     45: 
                     46: If you have the fingerprint, it's pretty easy to download the key.  This will import into your keychain.
                     47: 
                     48: netpgp: (Only if already downloaded from keyserver.)
                     49: [[!template  id=programlisting text="""
                     50: # netpgpkeys --import-key  file
                     51: """]]
                     52: 
                     53: gpg:
                     54: [[!template  id=programlisting text="""
                     55: # gpg --keyserver pgp.mit.edu --search-keys C631C69E
                     56: """]]
                     57: 
                     58: 
                     59: 
                     60: ## Key Signing
1.3     ! wiki       61: 
        !            62: gpg:
        !            63: [[!template  id=programlisting text="""
        !            64: # gpg --sign-key C631C69E
        !            65: """]]
        !            66: 
1.1       wiki       67: 
                     68: ## Signature Upload
                     69: *TBD*